Executive brief
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul
Affected products
- Go github.com/hashicorp/consul
Junglewise Threat Intelligence
CVE-2022-29153: GO-2022-0615 - Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul
CVE-2022-29153 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/hashicorp/consul (Go). Vendors: Go.
Related threats
- GO-2026-4690 - Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul
- GO-2025-4081 - Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2025-4082 - Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2024-3242 - Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
- GO-2024-3243 - Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul