CVE-2022-3920: Hashicorp Consul

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.

Affected products

• Hashicorp Consul: from 1.13.0, up to and including 1.13.3

Published 2022-11-16. Last modified 2026-06-17.