説明
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
AI分析AIによる分析
影響を受ける製品
cloudfoundrycf-deployment
cloudfoundrygorouter
参照
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory