CVE-2024-10086
Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
Résumé
Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.4.1"},{"fixed":"1.20.0"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-10086 consul
Références
- advisory discuss.hashicorp.com
- web security.netapp.com
- web nvd.nist.gov