CVE-2022-29153: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.

Affected products

• Fedoraproject Fedora: version 37 only
• Hashicorp Consul: before 1.9.17 (fixed in 1.9.17); from 1.10.0, before 1.10.10 (fixed in 1.10.10); from 1.11.0, before 1.11.5 (fixed in 1.11.5)

Published 2022-04-19. Last modified 2026-06-17.