CVE-2020-5401CWE-393

Cloud Foundry GoRouter is vulnerable to cache poisoning

Medium · published February 27, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01037 · 63.6th percentile
Weakness
CWE-393 · Return of Wrong Status Code
Published
2020-02-27T19:30Z
EPSS history
Timeline
  • 27 FEB 19:30Z
    Cloud Foundry GoRouter is vulnerable to cache poisoning
    cvelistv5