Cross-Site Scripting (XSS)

2021-04-2705:51:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.8%

JSON

github.com/hashicorp/consul is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript in a user’s browser via a malicious key-value (KV) entry.

CPENameOperatorVersion
consul:sideq1.7.4+dfsg1-1
consul:sideq1.8.7+dfsg1-1+b1
github.com/hashicorp/consullev1.8.9
github.com/hashicorp/consullev1.7.13
github.com/hashicorp/consullev1.9.4
consul:3.13eq1.9.1-r0
consuleq1.9.3-r0
consuleq1.7.1-r1
consuleq1.9.4-r0
consuleq1.7.3-r0

Name	Operator	Version
consul:sid	eq	1.7.4+dfsg1-1
consul:sid	eq	1.8.7+dfsg1-1+b1
github.com/hashicorp/consul	le	v1.8.9
github.com/hashicorp/consul	le	v1.7.13
github.com/hashicorp/consul	le	v1.9.4
consul:3.13	eq	1.9.1-r0
consul	eq	1.9.3-r0
consul	eq	1.7.1-r1
consul	eq	1.9.4-r0
consul	eq	1.7.3-r0