← Database

CVE-2022-38149

HIGH CVSS: 7.5 Published: 2022-08-17 Modified: 2026-06-17

Description

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2.

Affected Platforms

Hashicorp Consul Template

Weakness Type

CWE-532

References