Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-10086 1 Hashicorp 1 Consul 2025-01-10 6.1 Medium
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
CVE-2024-10006 1 Hashicorp 1 Consul 2025-01-10 8.3 High
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
CVE-2024-10005 1 Hashicorp 1 Consul 2025-01-10 8.1 High
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.