Lucene search

K
osvGoogleOSV:GHSA-5796-P3M6-9QJ4
HistoryMay 18, 2021 - 3:31 p.m.

Cloud Foundry Routing Improper Input Validation vulnerability

2021-05-1815:31:39
Google
osv.dev
7
cloud foundry
routing
input validation
vulnerability
gorouter

EPSS

0.001

Percentile

42.5%

Cloud Foundry Routing, all versions before 0.0.0-20191101214924-b1b5c44e050f, does not properly validate nonce input. A remote unauthorized malicious user could forge a route service request using an invalid nonce that will cause the Gorouter to crash.

EPSS

0.001

Percentile

42.5%