CVE-2020-25864

MEDIUMNuclei

HashiCorp Consul Cross-site Scripting vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2020-25864 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

github.com/hashicorp/consul

Browse Go / github.com/hashicorp/consul
GitHub Advisory1.9.0 to < 1.9.5 · Fixed in 1.9.5affected
1.8.0 to < 1.8.10 · Fixed in 1.8.10affected
Before 1.7.14 · Fixed in 1.7.14affected

Nuclei templates

1
ProjectDiscoveryMEDIUMHashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site ScriptingCVSS 6.1

HashiCorp Consul and Consul Enterprise up to version 1.9.4 are vulnerable to cross-site scripting via the key-value (KV) raw mode.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected Consul/Consul Enterprise application.

Remediation

Fixed in 1.9.5, 1.8.10 and 1.7.14.

WeaknessesCWE-79
Authorsc-sh0
Template tagscvecve2020consulxssintrusivehashicorpvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*
Shodan: http.title:"consul by hashicorp"
Shodan: cpe:"cpe:2.3:a:hashicorp:consul"
FOFA: title="consul by hashicorp"
Google: intitle:"consul by hashicorp"
https://discuss.hashicorp.com/t/hcsec-2021-07-consul-api-kv-endpoint-vulnerable-to-cross-site-scripting/23368 https://www.hashicorp.com/blog/category/consul https://nvd.nist.gov/vuln/detail/CVE-2020-25864 https://security.gentoo.org/glsa/202208-09 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

5