—
GO-2024-2505
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul
Quick fix
GO-2024-2505 — github.com/hashicorp/consul: upgrade to the fixed version with the command below.
go get github.com/hashicorp/consul@v1.6.10Details
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/consul
Introduced in:
1.2.0Fixed in: 1.6.10Fix
go get github.com/hashicorp/consul@v1.6.10References
- https://github.com/advisories/GHSA-6m72-467w-94rh[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-28053[ADVISORY]
- https://github.com/hashicorp/consul/commit/ff5215d882ac51b49c2647aac46b42aa9c890ce3[FIX]
- https://github.com/hashicorp/consul/pull/9240[FIX]
- https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#186-november-19-2020[WEB]
- https://security.gentoo.org/glsa/202208-09[WEB]
- https://www.hashicorp.com/blog/category/consul[WEB]