agent

Oct 14, 2024 GO-2024-3241 +1 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 11, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 12, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 16, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 6, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 3, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 6, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 18, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ func AgentMembersMapAddrVer(s *HTTPHandlers, req *http.Request) (map[string]string, error)

Jun 26, 2023 GO-2024-2704 +3 more

  GO-2024-2704: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type BaseDeps

+ LeafCertManager *leafcert.Manager

+ NetRPC *LazyNetRPC

type HTTPHandlers

+ func (s *HTTPHandlers) AgentVersion(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AssignManualServiceVIPs(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ type LazyNetRPC struct

+ func (r *LazyNetRPC) RPC(ctx context.Context, method string, args any, reply any) error

+ func (r *LazyNetRPC) SetNetRPC(rpc NetRPC)

+ type NetRPC interface

+ RPC func(ctx context.Context, method string, args any, reply any) error

Jun 10, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 1, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type BaseDeps

+ func (bd BaseDeps) Close()

Mar 30, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 24, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPHandlers

+ func (s *HTTPHandlers) OperatorRaftTransferLeader(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorUsage(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 16, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 29, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 21, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 15, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ type GRPCPorts struct

+ Plaintext int

+ TLS int

type TestAgent

+ OverrideDeps func(deps *BaseDeps)

+ UseGRPCTLS bool

+ UseHTTPS bool

type XDSSelf

+ Ports GRPCPorts

Sep 29, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 15, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPHandlers

+ func (s *HTTPHandlers) UIExportedServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Sep 20, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +6 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 9, 2022 GO-2022-1029 +6 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ type HTTPError struct

+ Reason string

+ StatusCode int

+ func (h HTTPError) Error() string

type HTTPHandlers

+ func (s *HTTPHandlers) PeeringEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) PeeringEstablish(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) PeeringGenerateToken(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) PeeringList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

type ServiceSummary

+ PeerName string

Jun 21, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 15, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 3, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type BaseDeps

+ MetricsConfig *lib.MetricsConfig

Apr 19, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Agent

+ func (a *Agent) AutoReloadConfig() error

type BaseDeps

+ WatchedFiles []string

+ type EntityTooLargeError struct

+ Reason string

+ func (e EntityTooLargeError) Error() string

type ForbiddenError

+ Reason string

type HTTPHandlers

+ func (s *HTTPHandlers) UICatalogOverview(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ type QueryOptionsCompat interface

+ GetAllowStale func() bool

+ GetRequireConsistent func() bool

+ GetUseCache func() bool

+ SetAllowStale func(bool)

+ SetFilter func(string)

+ SetMaxAge func(time.Duration)

+ SetMaxQueryTime func(time.Duration)

+ SetMaxStaleDuration func(time.Duration)

+ SetMinQueryIndex func(uint64)

+ SetMustRevalidate func(bool)

+ SetRequireConsistent func(bool)

+ SetStaleIfError func(time.Duration)

+ SetToken func(string)

+ SetUseCache func(bool)

type ServiceSummary

+ ConnectNative bool

type TestAgent

+ LogLevel hclog.Level

+ func NewTestAgentWithConfigFile(t *testing.T, hcl string, configFiles []string) *TestAgent

+ type UnauthorizedError struct

+ Reason string

+ func (e UnauthorizedError) Error() string

Apr 4, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 22, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 28, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 14, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ const TestDefaultAgentRecoveryToken

+ const TestDefaultInitialManagementToken

+ var CertExpirationGauges = []prometheus.GaugeDefinition

type Agent

+ func (a *Agent) AgentEnterpriseMeta() *structs.EnterpriseMeta

+ func (a *Agent) AgentLocalMember() serf.Member

+ func (a *Agent) ForceLeaveWAN(node string, prune bool, entMeta *structs.EnterpriseMeta) error

+ func (a *Agent) LANMembersInAgentPartition() []serf.Member

type HTTPHandlers

+ func (s *HTTPHandlers) ACLLegacy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentMetricsStream(resp http.ResponseWriter, req *http.Request) (interface{}, error)

type MetricsHandler

+ Stream func(ctx context.Context, encoder metrics.Encoder)

type TestACLConfigParams

+ AgentRecoveryToken string

+ InitialManagementToken string

+ func DefaultTestACLConfigParams() *TestACLConfigParams

+ type XDSSelf struct

+ Port int

+ SupportedProxies map[string][]string

Dec 6, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 18, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 2, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 15, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 16, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 28, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 1, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 22, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ type AddServiceRequest struct

+ Service *structs.NodeService

+ Source configSource

type BaseDeps

+ ViewStore *submatview.Store

type ServiceSummary

+ TransparentProxy bool

type ServiceTopology

+ TransparentProxy bool

type ServiceTopologySummary

+ Source string

Jun 17, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 16, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 10, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 27, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 5, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 16, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 18, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 14, 2022 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 28, 2022 GO-2022-0615 +8 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +8 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 15, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 21, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 4, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 1, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 20, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 11, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ var Gauges = []prometheus.GaugeDefinition

Nov 24, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ var CatalogCounters = []prometheus.CounterDefinition

+ var DNSCounters = []prometheus.CounterDefinition

+ var DNSSummaries = []prometheus.SummaryDefinition

+ var HTTPSummaries = []prometheus.SummaryDefinition

+ func NewAPIServers(logger hclog.Logger) *apiServers

type Agent

+ func (a *Agent) Failed() <-chan struct{}

+ type ConfigReloader func(rtConfig *config.RuntimeConfig) error

type GatewayConfig

+ AssociatedServiceCount int

+ type HTTPHandlers struct

+ func (s *HTTPHandlers) ACLAuthMethodCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthMethodCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthMethodDelete(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthMethodList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthMethodRead(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthMethodWrite(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPHandlers) ACLAuthorize(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleDelete(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleRead(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLBindingRuleWrite(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLBootstrap(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLClone(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLDestroy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLLogin(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLLogout(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyDelete(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyRead(resp http.ResponseWriter, req *http.Request, policyID, policyName string) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyReadByID(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyReadByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLPolicyWrite(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLReplicationStatus(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleDelete(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleRead(resp http.ResponseWriter, req *http.Request, roleID, roleName string) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleReadByID(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleReadByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRoleWrite(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLRulesTranslate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLRulesTranslateLegacyToken(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenClone(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenDelete(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenGet(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenSelf(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ACLTokenSet(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPHandlers) ACLUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentCheckFail(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentCheckPass(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentCheckUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentCheckWarn(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentConnectAuthorize(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentConnectCALeafCert(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentConnectCARoots(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentDeregisterCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentDeregisterService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentForceLeave(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentHealthServiceByID(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentHealthServiceByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentHost(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentJoin(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentLeave(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentMembers(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentMetrics(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentMonitor(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentNodeMaintenance(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentRegisterCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentRegisterService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentReload(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentSelf(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentServiceMaintenance(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) AgentToken(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogConnectServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogDatacenters(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogDeregister(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogGatewayServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogNodeServiceList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogNodeServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogRegister(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CatalogServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) Config(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ConfigApply(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ConnectCAConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ConnectCAConfigurationGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ConnectCAConfigurationSet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ConnectCARoots(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CoordinateDatacenters(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CoordinateNode(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CoordinateNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) CoordinateUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) DiscoveryChainRead(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) EventFire(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) EventList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) FederationStateGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) FederationStateList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) FederationStateListMeshGateways(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthChecksInState(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthConnectServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthIngressServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthNodeChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthServiceChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) HealthServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) Index(resp http.ResponseWriter, req *http.Request)

+ func (s *HTTPHandlers) IntentionCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionDeleteExact(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionExact(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionGetExact(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionMatch(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionPutExact(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionSpecific(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionSpecificDelete(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionSpecificGet(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IntentionSpecificUpdate(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) IsUIEnabled() bool

+ func (s *HTTPHandlers) KVSDelete(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPHandlers) KVSEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) KVSGet(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPHandlers) KVSGetKeys(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPHandlers) KVSPut(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPHandlers) KeyringInstall(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPHandlers) KeyringList(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPHandlers) KeyringRemove(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPHandlers) KeyringUse(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPHandlers) OperatorAutopilotConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorAutopilotState(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorKeyringEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorRaftConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorRaftPeer(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) OperatorServerHealth(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) PreparedQueryGeneral(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) PreparedQuerySpecific(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) ReloadConfig(newCfg *config.RuntimeConfig) error

+ func (s *HTTPHandlers) SessionCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) SessionDestroy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) SessionGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) SessionList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) SessionRenew(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) SessionsForNode(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) Snapshot(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) StatusLeader(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) StatusPeers(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) Txn(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UIGatewayIntentions(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UIGatewayServicesNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UIMetricsProxy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UINodeInfo(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UINodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UIServiceTopology(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPHandlers) UIServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ type ServiceListingSummary struct

+ ConnectedWithGateway bool

+ ConnectedWithProxy bool

type ServiceSummary

+ Datacenter string

+ func (s *ServiceSummary) LessThan(other *ServiceSummary) bool

+ type ServiceTopology struct

+ Downstreams []*ServiceTopologySummary

+ FilteredByACLs bool

+ Protocol string

+ Upstreams []*ServiceTopologySummary

+ type ServiceTopologySummary struct

+ Intention structs.IntentionDecisionSummary

Nov 17, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 10, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 7, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 12, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 21, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 4, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 3, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 26, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 18, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 11, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 22, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 3, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 23, 2020 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ type BaseDeps struct

+ AutoConfig *autoconf.AutoConfig

+ Cache *cache.Cache

+ ConnPool *pool.ConnPool

+ Logger hclog.InterceptLogger

+ MetricsHandler MetricsHandler

+ Router *router.Router

+ RuntimeConfig *config.RuntimeConfig

+ TLSConfigurator *tlsutil.Configurator

+ Tokens *token.Store

+ func NewBaseDeps(configLoader ConfigLoader, logOut io.Writer) (BaseDeps, error)

+ type ConfigLoader func(source config.Source) (cfg *config.RuntimeConfig, warnings []string, err error)

+ type MetricsHandler interface

+ DisplayMetrics func(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Aug 12, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 7, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ func TestConfigHCL(nodeID string) string

type Agent

+ func (a *Agent) GetConfig() *config.RuntimeConfig

+ func (a *Agent) GetLogger() hclog.InterceptLogger

+ type AgentOption func(opt *agentOptions)

+ func WithBuilderOpts(builderOpts config.BuilderOpts) AgentOption

+ func WithCLI(ui cli.Ui) AgentOption

+ func WithConfig(config *config.RuntimeConfig) AgentOption

+ func WithLogWriter(writer io.Writer) AgentOption

+ func WithLogger(logger hclog.InterceptLogger) AgentOption

+ func WithOverrides(overrides ...config.Source) AgentOption

+ func WithTelemetry(initTelemetry bool) AgentOption

type GatewayConfig

+ Addresses []string

type TestAgent

+ Overrides string

Jun 18, 2020 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ const ConfigEntryNotFoundErr

type Agent

+ func (a *Agent) CheckSecurity(conf *config.RuntimeConfig) error

+ func (a *Agent) PickRandomMeshGatewaySuitableForDialing(dc string) string

+ func (a *Agent) PrimaryMeshGatewayAddressesReadyCh() <-chan struct{}

+ func (a *Agent) RefreshPrimaryGatewayFallbackAddresses(addrs []string) error

+ func (a *Agent) WriteEvent(eventType string, payload interface{})

+ type Denylist struct

+ func NewDenylist(prefixes []string) *Denylist

+ func (d *Denylist) Block(path string) bool

+ type GatewayConfig struct

+ ListenerPort int

type HTTPServer

+ func (s *HTTPServer) CatalogGatewayServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) FederationStateGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) FederationStateList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) FederationStateListMeshGateways(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthIngressServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) UIGatewayServicesNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

type ServiceSummary

+ GatewayConfig GatewayConfig

+ InstanceCount int

+ ProxyFor []string

type TestAgent

+ func StartTestAgent(t *testing.T, a TestAgent) *TestAgent

Jun 15, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 21, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 14, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 22, 2021 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 26, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Self

+ XDS *xdsSelf

Aug 12, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 7, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 10, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 5, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPServer

+ func (s *HTTPServer) ACLPolicyReadByID(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyReadByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Mar 16, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 20, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 11, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ const TestDefaultAgentMasterToken

+ const TestDefaultMasterToken

+ func TestACLConfigWithParams(params *TestACLConfigParams) string

type Agent

+ func (a *Agent) IsMember(nodeName string) bool

type HTTPServer

+ func (s *HTTPServer) ACLAuthorize(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogNodeServiceList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) GenerateHTMLTemplateVars() map[string]interface{}

+ type TestACLConfigParams struct

+ AgentMasterToken string

+ AgentToken string

+ DefaultPolicy string

+ DefaultToken string

+ EnableTokenReplication bool

+ MasterToken string

+ PrimaryDatacenter string

+ ReplicationToken string

+ func DefaulTestACLConfigParams() *TestACLConfigParams

+ func (p *TestACLConfigParams) HasConfiguredTokens() bool

+ type TranslateAddressAccept int

+ const TranslateAddressAcceptAny

+ const TranslateAddressAcceptDomain

+ const TranslateAddressAcceptIPv4

+ const TranslateAddressAcceptIPv6

Jan 31, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 24, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 20, 2019 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2019 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 12, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 10, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Apr 14, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 20, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 30, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 13, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ func ConfigSourceFromName(name string) (configSource, bool)

type Agent

+ func (a *Agent) AdvertiseAddrLAN() string

+ func (a *Agent) LocalBlockingQuery(alwaysBlock bool, hash string, wait time.Duration, ...) (string, interface{}, error)

+ func (a *Agent) LocalState() *local.State

+ func (a *Agent) ServiceHTTPBasedChecks(serviceID string) []structs.CheckType

+ func (a *Agent) SyncPausedCh() <-chan struct{}

type ServiceManager

+ func (s *ServiceManager) Start()

+ func (s *ServiceManager) Stop()

Sep 12, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Agent

+ func (a *Agent) AddServiceAndReplaceChecks(service *structs.NodeService, chkTypes []*structs.CheckType, persist bool, ...) error

type TestAgent

+ func NewTestAgentWithFields(t *testing.T, start bool, ta TestAgent) *TestAgent

Aug 23, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ func ValidateLocalOnly(local bool, list bool) error

type Agent

+ func (a *Agent) TranslateServiceAddress(dc string, addr string, taggedAddresses map[string]structs.ServiceAddress) string

+ func (a *Agent) TranslateServicePort(dc string, port int, taggedAddresses map[string]structs.ServiceAddress) int

type HTTPServer

+ func (s *HTTPServer) DiscoveryChainRead(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Aug 13, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 26, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 15, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 8, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 25, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 27, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Agent

+ InterruptStartCh chan struct{}

May 22, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 8, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ func TestACLConfigNew() string

type DNSServer

+ func (d *DNSServer) ReloadConfig(newCfg *config.RuntimeConfig) error

type HTTPServer

+ func (s *HTTPServer) ACLAuthMethodCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLAuthMethodCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLAuthMethodDelete(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPServer) ACLAuthMethodList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLAuthMethodRead(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPServer) ACLAuthMethodWrite(resp http.ResponseWriter, req *http.Request, methodName string) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleDelete(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleRead(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPServer) ACLBindingRuleWrite(resp http.ResponseWriter, req *http.Request, bindingRuleID string) (interface{}, error)

+ func (s *HTTPServer) ACLLogin(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLLogout(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRoleCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRoleCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRoleDelete(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPServer) ACLRoleList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRoleRead(resp http.ResponseWriter, req *http.Request, roleID, roleName string) (interface{}, error)

+ func (s *HTTPServer) ACLRoleReadByID(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPServer) ACLRoleReadByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRoleWrite(resp http.ResponseWriter, req *http.Request, roleID string) (interface{}, error)

+ func (s *HTTPServer) Config(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ConfigApply(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ type NotFoundError struct

+ Reason string

+ func (e NotFoundError) Error() string

+ type ServiceManager struct

+ func NewServiceManager(agent *Agent) *ServiceManager

+ func (s *ServiceManager) AddService(service *structs.NodeService, chkTypes []*structs.CheckType, persist bool, ...) error

+ func (s *ServiceManager) RemoveService(serviceID string)

May 22, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 20, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Agent

+ func NewUnstartedAgent(t *testing.T, name string, hcl string) (*Agent, error)

Mar 4, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 28, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 23, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ type CodeWithPayloadError struct

+ ContentType string

+ Reason string

+ StatusCode int

+ func (e CodeWithPayloadError) Error() string

+ type ForbiddenError struct

+ func (e ForbiddenError) Error() string

type HTTPServer

+ func (s *HTTPServer) AgentHealthServiceByID(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentHealthServiceByName(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Nov 14, 2018 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type DNSServer

+ func (d *DNSServer) GetTTLForService(service string) (time.Duration, bool)

type HTTPServer

+ func (s *HTTPServer) ACLPolicyCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyDelete(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyRead(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPServer) ACLPolicyWrite(resp http.ResponseWriter, req *http.Request, policyID string) (interface{}, error)

+ func (s *HTTPServer) ACLRulesTranslate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLRulesTranslateLegacyToken(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLTokenCRUD(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLTokenClone(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPServer) ACLTokenCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLTokenDelete(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPServer) ACLTokenGet(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPServer) ACLTokenList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLTokenSelf(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLTokenSet(resp http.ResponseWriter, req *http.Request, tokenID string) (interface{}, error)

+ func (s *HTTPServer) AgentHost(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Oct 19, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Nov 13, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Oct 11, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type Agent

+ func (a *Agent) ConnectAuthorize(token string, req *structs.ConnectAuthorizeRequest) (authz bool, reason string, m *cache.ResultMeta, err error)

type HTTPServer

+ func (s *HTTPServer) AgentService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

Nov 21, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Sep 13, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type ServiceSummary

+ ExternalSources []string

Jul 30, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Jul 12, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Jun 25, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type Agent

+ func (a *Agent) AddProxy(proxy *structs.ConnectManagedProxy, persist bool, restoredProxyToken string) error

+ func (a *Agent) RemoveProxy(proxyID string, persist bool) error

+ type BadRequestError struct

+ Reason string

+ func (e BadRequestError) Error() string

type HTTPServer

+ func (s *HTTPServer) AgentConnectAuthorize(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentConnectCALeafCert(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentConnectCARoots(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentConnectProxyConfig(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogConnectServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ConnectCAConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ConnectCAConfigurationGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ConnectCAConfigurationSet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ConnectCARoots(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthConnectServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionMatch(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionSpecific(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionSpecificDelete(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionSpecificGet(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) IntentionSpecificUpdate(id string, resp http.ResponseWriter, req *http.Request) (interface{}, error)

type ServiceSummary

+ Kind structs.ServiceKind

type TestAgent

+ ExpectConfigError bool

Nov 21, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

May 11, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Oct 31, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Nov 21, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Apr 13, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const MaxDNSLabelLength

type ServiceSummary

+ Tags []string

Feb 9, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Feb 7, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Feb 6, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Jan 24, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Dec 15, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ func FixupChecks(raw interface{}, s *structs.Session) error

Nov 20, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ func LocalConfig(cfg *config.RuntimeConfig) local.Config

+ func NewDurationFixer(fields ...string) durationFixer

type Agent

+ State *local.State

type HTTPServer

+ func (s *HTTPServer) CoordinateNode(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CoordinateUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

type TestAgent

+ UseTLS bool

Nov 11, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Oct 16, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ func ExecSubprocess(args []string) (*exec.Cmd, error)

+ func ForwardSignals(cmd *exec.Cmd, logFn func(error), shutdownCh <-chan struct{})

+ func GetDNSConfig(conf *config.RuntimeConfig) *dnsConfig

+ func KillCommandSubtree(cmd *exec.Cmd) error

+ func NodeID() string

+ func SetSysProcAttr(cmd *exec.Cmd)

type CheckDocker

+ ScriptArgs []string

type CheckMonitor

+ ScriptArgs []string

+ type MethodNotAllowedError struct

+ Allow []string

+ Method string

+ func (e MethodNotAllowedError) Error() string

type Self

+ DebugConfig map[string]interface{}

type TestAgent

+ HCL string

+ func (a *TestAgent) DNSAddr() string

Oct 5, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Sep 28, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Nov 20, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const ConfigSourceLocal

+ const ConfigSourceRemote

type Config

+ EnableLocalScriptChecks bool

Sep 8, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const SegmentLimit

+ const SegmentNameLimit

+ func ValidateSegments(conf *Config) error

type Config

+ Limits Limits

+ Segment string

+ Segments []NetworkSegment

+ type Limits struct

+ RPCMaxBurst int

+ RPCRate rate.Limit

+ type NetworkSegment struct

+ Advertise string

+ Bind string

+ Name string

+ Port int

+ RPCListener bool

type TestAgent

+ func (a *TestAgent) SegmentAddr(name string) string

Sep 6, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Sep 5, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Aug 10, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Aug 9, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ var InvalidDnsRe = regexp.MustCompile(`[^A-Za-z0-9\\-]+`)

type Agent

+ MemSink *metrics.InmemSink

type Config

+ DeprecatedRetryJoinAzure RetryJoinAzure

+ DeprecatedRetryJoinEC2 RetryJoinEC2

+ DeprecatedRetryJoinGCE RetryJoinGCE

+ EnableACLReplication bool

+ func (c *Config) ResolveTmplAddrs() (err error)

+ func (cfg *Config) SetupTaggedAndAdvertiseAddrs() error

type HTTPServer

+ func (s *HTTPServer) ACLBootstrap(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentMetrics(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentToken(resp http.ResponseWriter, req *http.Request) (interface{}, error)

type Telemetry

+ AllowedPrefixes []string

+ BlockedPrefixes []string

+ FilterDefault *bool

+ PrefixFilter []string

Jul 20, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const DefaultDockerHost

+ func NewLocalState(c *Config, lg *log.Logger) *localState

+ func ParseHost(host string) (string, string, string, error)

type Agent

+ func (a *Agent) TranslateAddress(dc string, addr string, taggedAddresses map[string]string) string

+ func (a *Agent) TranslateAddresses(dc string, subj interface{})

type Autopilot

+ UpgradeVersionTag string

+ type Blacklist struct

+ func NewBlacklist(prefixes []string) *Blacklist

+ func (b *Blacklist) Block(path string) bool

type Config

+ EnableScriptChecks bool

type DockerClient

+ func NewDockerClient(host string, maxbuf int64) (*DockerClient, error)

type HTTPConfig

+ BlockEndpoints []string

type TestAgent

+ func (a *TestAgent) DNSDisableCompression(b bool)

Jul 17, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Jun 27, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const CheckBufSize

+ const MinInterval

+ const SerfLANKeyring

+ const SerfWANKeyring

+ const UserAgent

+ const WatchBufSize

+ var TempDir = os.TempDir()

+ func ACLDisabled(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func Asset(name string) ([]byte, error)

+ func AssetDir(name string) ([]string, error)

+ func AssetInfo(name string) (os.FileInfo, error)

+ func AssetNames() []string

+ func Bool(b bool) *bool

+ func DecodeCheckDefinition(raw interface{}) (*structs.CheckDefinition, error)

+ func DecodeServiceDefinition(raw interface{}) (*structs.ServiceDefinition, error)

+ func Duration(d time.Duration) *time.Duration

+ func ExecScript(script string) (*exec.Cmd, error)

+ func FixupCheckType(raw interface{}) error

+ func FixupConfigDurations(raw interface{}) error

+ func FixupLockDelay(raw interface{}) error

+ func MustAsset(name string) []byte

+ func ParseMetaPair(raw string) (string, string)

+ func ParseRelayFactor(n int) (uint8, error)

+ func RestoreAsset(dir, name string) error

+ func RestoreAssets(dir, name string) error

+ func TenPorts() int

+ func Uint64(i uint64) *uint64

+ func UniqueID() string

+ type AddressConfig struct

+ DNS string

+ HTTP string

+ HTTPS string

+ RPC string

+ type AdvertiseAddrsConfig struct

+ RPC *net.TCPAddr

+ RPCRaw string

+ SerfLan *net.TCPAddr

+ SerfLanRaw string

+ SerfWan *net.TCPAddr

+ SerfWanRaw string

+ type Agent struct

+ LogOutput io.Writer

+ LogWriter *logger.LogWriter

+ func New(c *Config) (*Agent, error)

+ func (a *Agent) AddCheck(check *structs.HealthCheck, chkType *structs.CheckType, persist bool, ...) error

+ func (a *Agent) AddService(service *structs.NodeService, chkTypes []*structs.CheckType, persist bool, ...) error

+ func (a *Agent) DisableNodeMaintenance()

+ func (a *Agent) DisableServiceMaintenance(serviceID string) error

+ func (a *Agent) EnableNodeMaintenance(reason, token string)

+ func (a *Agent) EnableServiceMaintenance(serviceID, reason, token string) error

+ func (a *Agent) ForceLeave(node string) (err error)

+ func (a *Agent) GetLANCoordinate() (*coordinate.Coordinate, error)

+ func (a *Agent) GossipEncrypted() bool

+ func (a *Agent) InstallKey(key, token string, relayFactor uint8) (*structs.KeyringResponses, error)

+ func (a *Agent) JoinLAN(addrs []string) (n int, err error)

+ func (a *Agent) JoinWAN(addrs []string) (n int, err error)

+ func (a *Agent) LANMembers() []serf.Member

+ func (a *Agent) LastUserEvent() *UserEvent

+ func (a *Agent) Leave() error

+ func (a *Agent) ListKeys(token string, relayFactor uint8) (*structs.KeyringResponses, error)

+ func (a *Agent) LocalMember() serf.Member

+ func (a *Agent) PauseSync()

+ func (a *Agent) RPC(method string, args interface{}, reply interface{}) error

+ func (a *Agent) ReloadCh() chan chan error

+ func (a *Agent) ReloadConfig(newCfg *Config) error

+ func (a *Agent) RemoveCheck(checkID types.CheckID, persist bool) error

+ func (a *Agent) RemoveKey(key, token string, relayFactor uint8) (*structs.KeyringResponses, error)

+ func (a *Agent) RemoveService(serviceID string, persist bool) error

+ func (a *Agent) ResumeSync()

+ func (a *Agent) RetryJoinCh() <-chan error

+ func (a *Agent) ShutdownAgent() error

+ func (a *Agent) ShutdownCh() <-chan struct{}

+ func (a *Agent) ShutdownEndpoints()

+ func (a *Agent) SnapshotRPC(args *structs.SnapshotRequest, in io.Reader, out io.Writer, ...) error

+ func (a *Agent) Start() error

+ func (a *Agent) StartSync()

+ func (a *Agent) Stats() map[string]map[string]string

+ func (a *Agent) UseKey(key, token string, relayFactor uint8) (*structs.KeyringResponses, error)

+ func (a *Agent) UserEvent(dc, token string, params *UserEvent) error

+ func (a *Agent) UserEvents() []*UserEvent

+ func (a *Agent) WANMembers() []serf.Member

+ type Autopilot struct

+ CleanupDeadServers *bool

+ DisableUpgradeMigration *bool

+ LastContactThreshold *time.Duration

+ LastContactThresholdRaw string

+ MaxTrailingLogs *uint64

+ RedundancyZoneTag string

+ ServerStabilizationTime *time.Duration

+ ServerStabilizationTimeRaw string

+ type CheckDocker struct

+ CheckID types.CheckID

+ DockerContainerID string

+ Interval time.Duration

+ Logger *log.Logger

+ Notify CheckNotifier

+ Script string

+ Shell string

+ func (c *CheckDocker) Init() error

+ func (c *CheckDocker) Start()

+ func (c *CheckDocker) Stop()

+ type CheckHTTP struct

+ CheckID types.CheckID

+ HTTP string

+ Header map[string][]string

+ Interval time.Duration

+ Logger *log.Logger

+ Method string

+ Notify CheckNotifier

+ TLSSkipVerify bool

+ Timeout time.Duration

+ func (c *CheckHTTP) Start()

+ func (c *CheckHTTP) Stop()

+ type CheckMonitor struct

+ CheckID types.CheckID

+ Interval time.Duration

+ Logger *log.Logger

+ Notify CheckNotifier

+ Script string

+ Timeout time.Duration

+ func (c *CheckMonitor) Start()

+ func (c *CheckMonitor) Stop()

+ type CheckNotifier interface

+ UpdateCheck func(checkID types.CheckID, status, output string)

+ type CheckTCP struct

+ CheckID types.CheckID

+ Interval time.Duration

+ Logger *log.Logger

+ Notify CheckNotifier

+ TCP string

+ Timeout time.Duration

+ func (c *CheckTCP) Start()

+ func (c *CheckTCP) Stop()

+ type CheckTTL struct

+ CheckID types.CheckID

+ Logger *log.Logger

+ Notify CheckNotifier

+ TTL time.Duration

+ func (c *CheckTTL) SetStatus(status, output string)

+ func (c *CheckTTL) Start()

+ func (c *CheckTTL) Stop()

+ type Config struct

+ ACLAgentMasterToken string

+ ACLAgentToken string

+ ACLDatacenter string

+ ACLDefaultPolicy string

+ ACLDisabledTTL time.Duration

+ ACLDownPolicy string

+ ACLEnforceVersion8 *bool

+ ACLMasterToken string

+ ACLReplicationToken string

+ ACLTTL time.Duration

+ ACLTTLRaw string

+ ACLToken string

+ AEInterval time.Duration

+ Addresses AddressConfig

+ AdvertiseAddr string

+ AdvertiseAddrWan string

+ AdvertiseAddrs AdvertiseAddrsConfig

+ Autopilot Autopilot

+ BindAddr string

+ Bootstrap bool

+ BootstrapExpect int

+ CAFile string

+ CAPath string

+ CertFile string

+ CheckDeregisterIntervalMin time.Duration

+ CheckReapInterval time.Duration

+ CheckUpdateInterval time.Duration

+ CheckUpdateIntervalRaw string

+ Checks []*structs.CheckDefinition

+ ClientAddr string

+ ConsulConfig *consul.Config

+ DNSConfig DNSConfig

+ DNSRecursor string

+ DNSRecursors []string

+ DataDir string

+ Datacenter string

+ DeprecatedAtlasACLToken string

+ DeprecatedAtlasEndpoint string

+ DeprecatedAtlasInfrastructure string

+ DeprecatedAtlasJoin bool

+ DeprecatedAtlasToken string

+ DeprecatedHTTPAPIResponseHeaders map[string]string

+ DevMode bool

+ DisableAnonymousSignature bool

+ DisableCoordinates bool

+ DisableHostNodeID *bool

+ DisableKeyringFile bool

+ DisableRemoteExec *bool

+ DisableUpdateCheck bool

+ Domain string

+ EnableDebug bool

+ EnableSyslog bool

+ EnableUI bool

+ EncryptKey string

+ EncryptVerifyIncoming *bool

+ EncryptVerifyOutgoing *bool

+ HTTPConfig HTTPConfig

+ KeyFile string

+ LeaveOnTerm *bool

+ LogLevel string

+ Meta map[string]string

+ NodeID types.NodeID

+ NodeName string

+ NonVotingServer bool

+ Performance Performance

+ PidFile string

+ Ports PortConfig

+ Protocol int

+ RaftProtocol int

+ ReconnectTimeoutLan time.Duration

+ ReconnectTimeoutLanRaw string

+ ReconnectTimeoutWan time.Duration

+ ReconnectTimeoutWanRaw string

+ RejoinAfterLeave bool

+ RetryInterval time.Duration

+ RetryIntervalRaw string

+ RetryIntervalWan time.Duration

+ RetryIntervalWanRaw string

+ RetryJoin []string

+ RetryJoinAzure RetryJoinAzure

+ RetryJoinEC2 RetryJoinEC2

+ RetryJoinGCE RetryJoinGCE

+ RetryJoinWan []string

+ RetryMaxAttempts int

+ RetryMaxAttemptsWan int

+ Revision string

+ SerfLanBindAddr string

+ SerfWanBindAddr string

+ Server bool

+ ServerName string

+ Services []*structs.ServiceDefinition

+ SessionTTLMin time.Duration

+ SessionTTLMinRaw string

+ SkipLeaveOnInt *bool

+ StartJoin []string

+ StartJoinWan []string

+ SyncCoordinateIntervalMin time.Duration

+ SyncCoordinateRateTarget float64

+ SyslogFacility string

+ TLSCipherSuites []uint16

+ TLSCipherSuitesRaw string

+ TLSMinVersion string

+ TLSPreferServerCipherSuites bool

+ TaggedAddresses map[string]string

+ Telemetry Telemetry

+ TranslateWanAddrs bool

+ UIDir string

+ UnixSockets UnixSocketConfig

+ VerifyIncoming bool

+ VerifyIncomingHTTPS bool

+ VerifyIncomingRPC bool

+ VerifyOutgoing bool

+ VerifyServerHostname bool

+ Version string

+ VersionPrerelease string

+ WatchPlans []*watch.Plan

+ Watches []map[string]interface{}

+ func DecodeConfig(r io.Reader) (*Config, error)

+ func DefaultConfig() *Config

+ func DevConfig() *Config

+ func MergeConfig(a, b *Config) *Config

+ func ReadConfigPaths(paths []string) (*Config, error)

+ func TestACLConfig() *Config

+ func TestConfig() *Config

+ func (c *Config) ClientListener(override string, port int) (net.Addr, error)

+ func (c *Config) DNSAddrs() ([]ProtoAddr, error)

+ func (c *Config) EncryptBytes() ([]byte, error)

+ func (c *Config) GetTokenForAgent() string

+ func (c *Config) HTTPAddrs() ([]ProtoAddr, error)

+ func (c *Config) IncomingHTTPSConfig() (*tls.Config, error)

+ func (c *Config) VerifyUniqueListeners() error

+ type CriticalCheck struct

+ Check *structs.HealthCheck

+ CriticalFor time.Duration

+ type DNSConfig struct

+ AllowStale *bool

+ DisableCompression bool

+ EnableTruncate bool

+ MaxStale time.Duration

+ MaxStaleRaw string

+ NodeTTL time.Duration

+ NodeTTLRaw string

+ OnlyPassing bool

+ RecursorTimeout time.Duration

+ RecursorTimeoutRaw string

+ ServiceTTL map[string]time.Duration

+ ServiceTTLRaw map[string]string

+ UDPAnswerLimit int

+ type DNSServer struct

+ func NewDNSServer(a *Agent) (*DNSServer, error)

+ func (s *DNSServer) ListenAndServe(network, addr string, notif func()) error

+ type DockerClient interface

+ CreateExec func(docker.CreateExecOptions) (*docker.Exec, error)

+ InspectExec func(string) (*docker.ExecInspect, error)

+ StartExec func(string, docker.StartExecOptions) error

+ type FilePermissions interface

+ Group func() string

+ Mode func() string

+ User func() string

+ type HTTPConfig struct

+ ResponseHeaders map[string]string

+ type HTTPServer struct

+ func NewHTTPServer(addr string, a *Agent) *HTTPServer

+ func (s *HTTPServer) ACLClone(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLDestroy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLReplicationStatus(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) ACLUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentCheckFail(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentCheckPass(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentCheckUpdate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentCheckWarn(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentDeregisterCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentDeregisterService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentForceLeave(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentJoin(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentLeave(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentMembers(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentMonitor(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentNodeMaintenance(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentRegisterCheck(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentRegisterService(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentReload(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentSelf(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentServiceMaintenance(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) AgentServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogDatacenters(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogDeregister(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogNodeServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogRegister(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CatalogServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CoordinateDatacenters(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) CoordinateNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) EventFire(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) EventList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthChecksInState(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthNodeChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthServiceChecks(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) HealthServiceNodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) Index(resp http.ResponseWriter, req *http.Request)

+ func (s *HTTPServer) IsUIEnabled() bool

+ func (s *HTTPServer) KVSDelete(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPServer) KVSEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) KVSGet(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPServer) KVSGetKeys(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPServer) KVSPut(resp http.ResponseWriter, req *http.Request, args *structs.KeyRequest) (interface{}, error)

+ func (s *HTTPServer) KeyringInstall(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPServer) KeyringList(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPServer) KeyringRemove(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPServer) KeyringUse(resp http.ResponseWriter, req *http.Request, args *keyringArgs) (interface{}, error)

+ func (s *HTTPServer) OperatorAutopilotConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) OperatorKeyringEndpoint(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) OperatorRaftConfiguration(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) OperatorRaftPeer(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) OperatorServerHealth(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) PreparedQueryGeneral(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) PreparedQuerySpecific(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionCreate(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionDestroy(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionGet(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionList(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionRenew(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) SessionsForNode(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) Snapshot(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) StatusLeader(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) StatusPeers(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) Txn(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) UINodeInfo(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) UINodes(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ func (s *HTTPServer) UIServices(resp http.ResponseWriter, req *http.Request) (interface{}, error)

+ type NotifyGroup struct

+ func (n *NotifyGroup) Clear(ch chan struct{})

+ func (n *NotifyGroup) Notify()

+ func (n *NotifyGroup) Wait(ch chan struct{})

+ func (n *NotifyGroup) WaitCh() chan struct{}

+ type Performance struct

+ RaftMultiplier uint

+ type PortConfig struct

+ DNS int

+ HTTP int

+ HTTPS int

+ RPC int

+ SerfLan int

+ SerfWan int

+ Server int

+ type ProtoAddr struct

+ Addr string

+ Net string

+ Proto string

+ func (p ProtoAddr) String() string

+ type RetryJoinAzure struct

+ ClientID string

+ SecretAccessKey string

+ SubscriptionID string

+ TagName string

+ TagValue string

+ TenantID string

+ type RetryJoinEC2 struct

+ AccessKeyID string

+ Region string

+ SecretAccessKey string

+ TagKey string

+ TagValue string

+ type RetryJoinGCE struct

+ CredentialsFile string

+ ProjectName string

+ TagValue string

+ ZonePattern string

+ type Self struct

+ Config *Config

+ Coord *coordinate.Coordinate

+ Member serf.Member

+ Meta map[string]string

+ Stats map[string]map[string]string

+ type ServiceSummary struct

+ ChecksCritical int

+ ChecksPassing int

+ ChecksWarning int

+ Name string

+ Nodes []string

+ type Telemetry struct

+ CirconusAPIApp string

+ CirconusAPIToken string

+ CirconusAPIURL string

+ CirconusBrokerID string

+ CirconusBrokerSelectTag string

+ CirconusCheckDisplayName string

+ CirconusCheckForceMetricActivation string

+ CirconusCheckID string

+ CirconusCheckInstanceID string

+ CirconusCheckSearchTag string

+ CirconusCheckSubmissionURL string

+ CirconusCheckTags string

+ CirconusSubmissionInterval string

+ DisableHostname bool

+ DogStatsdAddr string

+ DogStatsdTags []string

+ StatsdAddr string

+ StatsiteAddr string

+ StatsitePrefix string

+ func (s *Telemetry) GoString() string

+ type TestAgent struct

+ Config *Config

+ DataDir string

+ Key string

+ LogOutput io.Writer

+ LogWriter *logger.LogWriter

+ Name string

+ NoInitialSync bool

+ func NewTestAgent(name string, c *Config) *TestAgent

+ func (a *TestAgent) Client() *api.Client

+ func (a *TestAgent) HTTPAddr() string

+ func (a *TestAgent) Shutdown() error

+ func (a *TestAgent) Start() *TestAgent

+ type UnixSocketConfig struct

+ type UnixSocketPermissions struct

+ Grp string

+ Perms string

+ Usr string

+ func (u UnixSocketPermissions) Group() string

+ func (u UnixSocketPermissions) Mode() string

+ func (u UnixSocketPermissions) User() string

+ type UserEvent struct

+ ID string

+ LTime uint64

+ Name string

+ NodeFilter string

+ Payload []byte

+ ServiceFilter string

+ TagFilter string

+ Version int