| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | ≥ 1.10.0, < 1.10.10≥ 1.11.0, < 1.11.5< 1.9.17 | 1.10.101.11.51.9.17 |
| consul | ≥ 1.10.0, < 1.10.10≥ 1.11.0, < 1.11.5< 1.9.17 | 1.10.101.11.51.9.17 |
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that HTTP health check endpoints returning an HTTP redirect may be abused as a vector for server-side request forgery (SSRF). This vulnerability, CVE-2022-29153, was fixed in Consul 1.9.17, 1.10.10, and 1.11.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free