Merge pull request #10030 from hashicorp/fix-ent-audit-log-bypass

Add synthetic enterprise entry for CVE-2021-28156
hashicorp · Apr 15, 2021 · 065fe32 · 065fe32
1 parent 10ca99b
commit 065fe32
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.changelog/_795.txt b/.changelog/_795.txt
@@ -0,0 +1,3 @@
+```release-note:security
+audit-logging: Parse endpoint URL to prevent requests from bypassing the audit log [CVE-2021-28156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28156)
+```