Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cloudfoundry gorouter vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2020-5420
Cloud Foundry Routing (Gorouter) versions before 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
Cloudfoundry Cf-deploymentCloudfoundry Gorouter
2.6
CVSSv2
CVE-2016-0713
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle malicious users to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
Cloudfoundry Cf-release 196Cloudfoundry Cf-release 221Cloudfoundry Cf-release 159Cloudfoundry Cf-release 162Cloudfoundry Cf-release 174Cloudfoundry Cf-release 141Cloudfoundry Cf-release 152Cloudfoundry Cf-release 200Cloudfoundry Cf-release 184Cloudfoundry Cf-release 222Cloudfoundry Cf-release 215Cloudfoundry Cf-release 185Cloudfoundry Cf-release 218Cloudfoundry Cf-release 217Cloudfoundry Cf-release 165Cloudfoundry Cf-release 173Cloudfoundry Cf-release 195Cloudfoundry Cf-release 158Cloudfoundry Cf-release 212Cloudfoundry Cf-release 205Cloudfoundry Cf-release 190Cloudfoundry Cf-release 148
NA
CVE-2023-20882
In Cloud foundry routing release versions from 0.262.0 and before 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry. Under the right circumstances, when client connections are closed prematurely, gorouter marks the curre...
Cloudfoundry Routing ReleaseCloudfoundry Cf-deployment
7.8
CVSSv2
CVE-2019-11289
Cloud Foundry Routing, all versions prior to 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Cloudfoundry Cf-deploymentCloudfoundry Routing-release
5.5
CVSSv2
CVE-2018-1221
In cf-deployment prior to 1.14.0 and routing-release prior to 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to ste...
Cloudfoundry Cf-deploymentCloudfoundry Routing-release
4
CVSSv2
CVE-2020-5416
Cloud Foundry Routing (Gorouter), versions before 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP request...
Cloudfoundry Cf-deploymentCloudfoundry Routing-release
5
CVSSv2
CVE-2020-5401
Cloud Foundry Routing Release, versions before 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.
Cloudfoundry Routing Release
4
CVSSv2
CVE-2019-3789
Cloud Foundry Routing Release, all versions before 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space developer permissions can create a private domain that shadows the external domain of the route servic...
Cloudfoundry Routing Release
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook