CVE-2022-3920

Publication date

2022-11-15 23:25:30

Family

HashiCorp

State

PUBLISHED

Description

HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filterings imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.