CVE-2023-45285

CVE-2023-45285 describes a vulnerability in golang's 'go get' command where fetching modules with a ".git" suffix can insecurely fallback to the "git://" protocol, even without GOINSECURE set, if secure protocols fail. This affects users directly fetching modules (GOPROXY=off). Rated 7.5 HIGH, it has a network attack vector with low complexity, potentially leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion.