Description
A weakness has been identified in Envoy up to 1.33.0. Affected is the function params.add of the file source/extensions/filters/http/header_mutation/header_mutation.cc of the component Query Parameter Handler. This manipulation causes injection. Remote exploitation of the attack is possible. Patch name: f8f4f1e02fdc64ecd4acf2d903208dd7285ad3a4. It is suggested to install a patch to address this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Envoy | 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33.0 | — |
References
- VDB-359546 | Envoy Query Parameter header_mutation.cc params.add injection vdb-entry technical-description
- VDB-359546 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #797241 | Envoy >= 1.33.0 Injection (CWE-74) third-party-advisory
- https://github.com/envoyproxy/envoy/pull/43502/ issue-tracking patch
- https://github.com/envoyproxy/envoy/commit/f8f4f1e02fdc64ecd4acf2d903208dd7285ad3a4 patch