Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-25017

Опубликовано: 01 окт. 2020
Источник: debian

Описание

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
envoyproxyitppackage

Связанные уязвимости

CVSS3: 8.3
redhat
больше 5 лет назад

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.

CVSS3: 8.3
nvd
больше 5 лет назад

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.