描述
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
AI分析AI驱动
受影响产品
cloudfoundrycf-deployment
cloudfoundrygorouter
参考资料
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory
- https://www.cloudfoundry.org/blog/cve-2020-5420Vendor Advisory