CVE-2025-46735 PUBLISHED CVSS 1.100000023841858 LOW

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.

EPSS 0.30% · 53.6th percentile

Risk Scores

CVSS v4.0
1.100000023841858
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:U
EPSS Score
0.30%
53.6th percentile

Affected Products

VendorProductVersions
github.comnrkno/terraform-provider-windns0, 0
nrknoterraform-provider-windns<= 1.0.4, <= 1.0.4

Timeline

References

Open in Interactive Console →