Cloud Foundry / Routing-Release
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-34041 | CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter | MEDIUM | 5.3 | Sep 8, 2023 |
| CVE-2020-5416 | CF clusters with NGINX in front of them may be vulnerable to DoS | MEDIUM | 6.5 | Aug 21, 2020 |
| CVE-2020-15586 | golang: data race in certain net/http servers including ReverseProxy can lead to DoS | MEDIUM | 5.9 | Jul 17, 2020 |
| CVE-2019-11289 | A forged route service request using an invalid nonce can cause the gorouter to panic and crash | HIGH | 8.6 | Nov 19, 2019 |
| CVE-2018-1193 | Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded… | MEDIUM | 5.3 | May 23, 2018 |
| CVE-2018-1221 | In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers… | HIGH | 8.1 | Mar 19, 2018 |
| CVE-2017-8034 | The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions… | MEDIUM | 6.6 | Jul 17, 2017 |
| CVE-2016-8218 | An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic i… | CRITICAL | 9.8 | Jun 13, 2017 |
Showing 1 to 8 of 8 CVEs