cve.bz

CVE-2020-25864

6.1 mediumEPSS 6.1%

Medium (6.1) in hashicorp consul. EPSS 6.1% chance of exploitation in the next 30 days. Fixed in github.com/hashicorp/consul 1.7.14, 1.8.10, 1.9.5.

HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.

Severity

CVSS 3.1

6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-8xmx-h8rq-h94jGogithub.com/hashicorp/consul>=1.9.0 <1.9.51.9.5
GHSA-8xmx-h8rq-h94jGogithub.com/hashicorp/consul>=1.8.0 <1.8.101.8.10
GHSA-8xmx-h8rq-h94jGogithub.com/hashicorp/consul<1.7.141.7.14
GO-2023-1851Gogithub.com/hashicorp/consul<1.7.14
>=1.8.0 <1.8.10
>=1.9.0 <1.9.5		1.7.14, 1.8.10, 1.9.5

References

Check your stackJSON