CVE-2022-29153

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects…

published April 19, 2022

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08746 · 95.2th percentile
Published
2022-04-19T00:00Z
EPSS history
Timeline
  • 19 APR 00:00Z
    HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects…
    cvelistv5