Description
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cloud Foundry | Routing | All – < 0.193.0 | 0.193.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | code.cloudfoundry.org/gorouter | < 0.0.0-20191101214924-b1b5c44e050f | 0.0.0-20191101214924-b1b5c44e050f | GHSA-5796-p3m6-9qj4 |
| Go | github.com/cloudfoundry/gorouter | < 0.0.0-20191101214924-b1b5c44e050f | 0.0.0-20191101214924-b1b5c44e050f | GO-2021-0102 |