GHSA-gw2g-hhc9-wgjh
Missing Authorization in HashiCorp Consul
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hashicorp/consul | >= 1.13.0, < 1.14.0 | 1.14.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.
References
External links from the advisory. They lead to third-party sites.