code.cloudfoundry.org/gorouter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.6

CVE-2019-11289

A forged route service request using an invalid nonce can cause the gorouter to panic and crash

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.

Cloud Foundry Routing github.com/cloudfoundry/gorouter code.cloudfoundry.org/gorouter Go

Nov 19, 2019