| Package | Affected versions | Patched versions |
|---|---|---|
| terraform enterprise | ≤ 202108-1 |
HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free