Cloud Foundry cf-release 207
Approved changes feed: RSS · Atom
cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*
part: a version: 207 update: *
| Vendor | Cloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4) |
|---|---|
| Product | Cf Release (fccec3fb-23bc-522a-a656-bc8c73395528) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cloudfoundry-attic/cf-release |
purl2cpe | 2026-06-01 10:12:05.109283 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-8218 |
vulnerable | 2026-06-03 14:36:08.983012 |
Details available
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-06T02:13:21.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0713 |
vulnerable | 2026-06-03 14:35:21.904972 |
Details available
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
Published: 2017-08-31T14:00:00.000Z
Updated: 2024-08-05T22:30:03.569Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.