CVE-2023-5834 (published 2023-10-27T21:06:38.680Z)
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
Affected products: Vendor: HashiCorp
Product: Vagrant
Versions: *