CVE-2021-28156

Description

References

• discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369 · Vendor Advisory
• security.gentoo.org/glsa/202208-09 · Third Party Advisory
• hashicorp.com/blog/category/consul · Vendor Advisory

More vulnerabilities in consul

• CVE-2025-11375MEDIUM 6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Conten…
• CVE-2025-11374MEDIUM 6.5Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header…
• CVE-2024-10086MEDIUM 6.1A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP head…
• CVE-2024-10006MEDIUM 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP…
• CVE-2024-10005MEDIUM 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HT…