Описание
Cloud Foundry Routing Improper Input Validation vulnerability
Cloud Foundry Routing, all versions before 0.0.0-20191101214924-b1b5c44e050f, does not properly validate nonce input. A remote unauthorized malicious user could forge a route service request using an invalid nonce that will cause the Gorouter to crash.
Пакеты
Наименование
code.cloudfoundry.org/gorouter
go
Затронутые версииВерсия исправления
< 0.0.0-20191101214924-b1b5c44e050f
0.0.0-20191101214924-b1b5c44e050f
Связанные уязвимости
CVSS3: 8.6
nvd
около 6 лет назад
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.