← Database

CVE-2021-41803

HIGH CVSS: 7.1 Published: 2022-09-23 Modified: 2026-06-17

Description

HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2."

Affected Platforms

Hashicorp Consul

Weakness Type

CWE-862, CWE-862

References