Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-5401 EUVD-2020-26580GHSA-jgr4-5mrv-w8ph

Cloud Foundry GoRouter is vulnerable to cache poisoning

Published Feb 27, 2020 · Updated Sep 16, 2024 · Assigned by pivotal

Description

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

Affected products

VendorProductAffectedFixed
Cloud Foundry Routing unspecified – < 0.197.0 0.197.0

References