reproxy

Reproxy는 다양한 제공자docker, static, file, consul catalog를 지원하는 간단한 엣지 HTTPs 서버/리버스 프록시입니다. 하나 이상의 제공자가 요청된 서버, 요청 URL, 대상 URL 및 상태 확인 URL에 대한 정보를 제공합니다. 단일 바이너리 또는 도커 컨테이너로 배포됩니다. Let's Encrypt를 이용한 자동 SSL 종료 사용자 제공 SSL 인증서 지원 간단하지만 유연한 프록시 규칙 정적, 명령줄 프록시 규칙 제공자 동적, 파일 기반 프록시 규칙 제공자 자동 검색을 지원하는 Docke...

CVE-2021-41805

CVE-2021-41805 API経由のHashicorp Consul RCE HashiCorp Consul Enterprise 1.8.17 未満、1.9.x は 1.9.11 未満、および 1.10.x は 1.10.4 未満には、不適切なアクセス制御があります。あるネームスペースの ACL トークン デフォルトの operator:write 権限を持つもの は、別のネームスペースでの意図しない権限昇格に使用される可能性があります。 概要 CVEID : CVE-2021-41805 基本スコア : 8.8 深刻度 : 高 発行日 : 2021-12-12...

CVE-2026-14361

CVE-2026-14361 Consul Template 的 writeToFile 辅助函数直接打开操作者提供的目标路径，并跟随被链接的路径组件，从而使渲染输出能够逃逸预期目录并覆盖已存在的文件。 简介 我在审查 HashiCorp Consul Template 时发现了这个问题，当时脑海中有一个直接的文件系统安全问题： 如果writeToFile 收到的路径看似位于预期目录之内，它是否会验证文件系统实际将数据写入何处？ 在本例中，答案是否定的。 writeToFile 模板辅助函数通过 os.Create 或 os.OpenFile 直接打开用户提供的最终路径。...

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting

HashiCorp Consul and Consul Enterprise up to version 1.9.4 are vulnerable to cross-site scripting via the key-value KV raw mode. id: CVE-2020-25864 info: name: HashiCorp Consul/Consul Enterprise =1.9.4 - Cross-Site Scripting author: c-sh0 severity: medium description: | HashiCorp Consul and Consu...

CLEANSTART-2026-ED72933 html

Security vulnerability affects the consul package. The html...

CLEANSTART-2026-OZ83684 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Security vulnerability affects the consul package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

CLEANSTART-2026-HZ65290 Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header

Security vulnerability affects the consul package. Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header...

CLEANSTART-2026-RO22308 (*x509

Security vulnerability affects the consul package. x509...

CLEANSTART-2026-TQ62696 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the consul package. gRPC-Go is the Go language implementation of gRPC...

CVE-2026-5061

CVE-2026-5061 Consul Template 在模板评估期间验证了符号链接的指向位置，但其后的依赖项获取读取的却是原始路径。在这两个操作之间重新定向链接，会将沙箱内的文件引用变成沙箱外的文件泄露。 简介 我在审查 HashiCorp Consul Template 时发现了这个问题，当时我带着一个非常具体的安全疑问： 如果sandboxpath 在模板评估期间验证了符号链接，那么后续的文件读取是否仍然绑定到同一个已验证的目标？ 在这个案例中，答案是否定的。 file...

CVE-2026-27172

camel-consul ConsulRegistry 反序列化漏洞复现工具（CVE-2026-27172） 本项目演示了 Apache Camel 的 camel-consul 组件（ConsulRegistry）中的一个 Java 反序列化漏洞 ，编号为 CVE-2026-27172 。它与 CVE-2024-22369 、CVE-2024-23114 和 CVE-2026-25747 属于同类问题，且在修复上述 CVE 时被遗漏。 公告：https://camel.apache.org/security/CVE-2026-27172.html 漏洞摘要 属性| 值 ---|---...

CVE-2021-41805

CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING 法的免責事項: このツールは教育目的のみに厳格に使用されるものです！ 事前の相互同意なしにターゲットを攻撃するためにこのツールを使用することは違法です。 このツールを使用する際に適用されるすべての法律を遵守するのはユーザーの責任です。 このツールの開発者は一切の責任を負わず、このプログラムの誤用または損害についても責任を負いません。 CVEについて ある名前空間のACLトークン （デフォルトのoperator:write...

BIT-CONSUL-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh

Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...

BIT-CONSUL-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

BIT-CONSUL-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...

BIT-CONSUL-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

BIT-CONSUL-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

CVE-2026-62987 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses protectHeaders for a hardcoded set of forwarded headers but omits the operator-configured ClientIPHeader, TLSHeader, and RequestID names. In...

CVE-2026-62987

Fabio (an HTTP/S and TCP router for Consul-managed applications) versions 1.6.6 through 1.7.2 contain an incomplete fix for CVE-2025-48865 . The protectHeaders logic in proxy/http_headers.go covers a hardcoded set of forwarded headers but omits operator-configured ClientIPHeader , TLSHeader , and...