logo

Database

Lack of data validation In github.com/hashicorp/consul

Description

Audit / Logging Errors

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-281562. NVD-2021-281563. OSV-2021-281564. GCVE-2021-28156

References

1. https://www.hashicorp.com/blog/category/consul2. https://discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.