Skip to content
OpenAdvisories

Vendor

cloudendpoints

1 known vulnerabilities.

Products

esp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2021-41130

    X-Endpoint-API-UserInfo can be spoofed in cloudendpoints Extensible Service Proxy

    Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP header "X-Endpoint-A…

    cloudendpoints esp