GitHub Advisoryadvisory · Go

GHSA-q6h7-4qgw-2j9p Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector

HIGH Published 2022-04-20 Modified 2022-12-27 Official page ↗
Aliases
CVE-2022-29153
Ecosystem
Go
Packages
github.com/hashicorp/consul
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-918
Reviewed
2022-04-28

Affected packages

• Go github.com/hashicorp/consul: < 1.9.17 → fixed in 1.9.17 • Go github.com/hashicorp/consul: >= 1.10.0, < 1.10.10 → fixed in 1.10.10 • Go github.com/hashicorp/consul: >= 1.11.0, < 1.11.5 → fixed in 1.11.5

Description

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that HTTP health check endpoints returning an HTTP redirect may be abused as a vector for server-side request forgery (SSRF). This vulnerability, CVE-2022-29153, was fixed in Consul 1.9.17, 1.10.10, and 1.11.5.

Related

Alias · CVE (1)

  • CVE-2022-29153 HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References