CVE-2022-29153
40Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 8.7%
da publicação à arma
Publicada no NVD19 de abr.
VulnCheck+573d
probabilidade de exploração
8.7%top 5% das CVEs
exploração observada
simVulnCheck
HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.
Produtos afetados
n/a · n/aReferências
https://discuss.hashicorp.comhttps://discuss.hashicorp.com/t/hcsec-2022-10-consul-s-http-health-check-may-allow-server-side-request-forgery/https://discuss.hashicorp.com/t/hcsec-2022-10-consul-s-http-health-check-may-allow-server-side-request-forgery/38393https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBODKZL7HQE5XXS3SA2VIDVL4LAA5RWH/https://security.gentoo.org/glsa/202208-09https://security.netapp.com/advisory/ntap-20220602-0005/