| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | ≥ 1.4.1, < 1.20.0 | 1.20.0 |
| consul | ≥ 1.18.0, < 1.18.5≥ 1.19.0, < 1.19.3≥ 1.4.1, < 1.15.15≥ 1.4.1, < 1.20.0 | 1.18.51.19.31.15.151.20.0 |
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free