{"action":"Upgrade github.com/hashicorp/consul to 1.6.10 or later.","affected":[{"fixed":"1.6.10","introduced":"1.2.0"},{"fixed":"1.7.10","introduced":"1.7.0"},{"fixed":"1.8.6","introduced":"1.8.0"}],"component":"github.com/hashicorp/consul","cve_ids":["CVE-2020-28053"],"ecosystem":"Go","epss":0.01453,"exploited":false,"fixed_versions":["1.6.10","1.7.10","1.8.6"],"ghsa_id":"GHSA-6m72-467w-94rh","id":"tcs_01M5KF0E707BZV61DGTBVT5QVT","modified_at":"2024-06-28T15:58:44.521738Z","published_at":"2024-01-31T23:11:32Z","references":["https://osv.dev/vulnerability/GHSA-6m72-467w-94rh","https://nvd.nist.gov/vuln/detail/CVE-2020-28053","https://github.com/hashicorp/consul/pull/9240","https://github.com/hashicorp/consul/commit/ff5215d882ac51b49c2647aac46b42aa9c890ce3","https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#186-november-19-2020","https://security.gentoo.org/glsa/202208-09","https://www.hashicorp.com/blog/category/consul"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6m72-467w-94rh","url":"https://osv.dev/vulnerability/GHSA-6m72-467w-94rh"}],"summary":"Privilege Escalation in HashiCorp Consul"}