Description
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cloud Foundry | Routing | All – < 0.206.0 | 0.206.0 |
| Cloud Foundry | CF Deployment | All – < 13.15.0 | 13.15.0 |