—
GO-2023-1945
HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul
Quick fix
GO-2023-1945 — github.com/hashicorp/consul: upgrade to the fixed version with the command below.
go get github.com/hashicorp/consul@v1.4.3Details
HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/consul
Introduced in:
1.4.0Fixed in: 1.4.3Fix
go get github.com/hashicorp/consul@v1.4.3References
- https://github.com/advisories/GHSA-fhm8-cxcv-pwvc[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2019-8336[ADVISORY]
- https://github.com/hashicorp/consul/commit/90040f8bffb311e6cd8599273e95b607175e311f[FIX]
- https://github.com/hashicorp/consul/issues/5423[REPORT]
- https://github.com/hashicorp/consul/blob/003370ded024096cd89fb2aa2bc15293c23b9707/agent/consul/leader.go#L405[WEB]