CVE-2020-25864

6.1MEDIUM

Key Information

Vendor: Hashicorp
Status: Consul
Vendor: CVE Published:; 20 April 2021

Summary

HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Apr 20, 2021
Vulnerability Reserved.
Sep 23, 2020

Collectors

NVD DatabaseMitre Database