CVE-2023-4782 (published 2023-09-08T17:04:33.242Z)
Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.
Affected products: Vendor: HashiCorp
Product: Terraform
Versions: 1.0.8