Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-10086
6.1
MEDIUMCVSS v3
Severity scale
010
Description
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
hashicorp/consul
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.>= 1.19.0, < 1.19.3, >= 1.18.0, < 1.18.5, >= 1.4.1, < 1.15.15, >= 1.4.1, < 1.20.0NVD