CVE-2020-5420
7.7HIGHCloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially craft
Published: 9/3/2020Updated: 11/21/2024
Description
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
AI AnalysisPowered by AI
Affected Products
cloudfoundrycf-deployment
cloudfoundrygorouter
References
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory