Routing Release
Approved changes feed: RSS · Atom
cpe:2.3:a:cloudfoundry:routing-release:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4) |
|---|---|
| Product | Routing Release (a83aafb7-46d8-5697-b5e0-2557f232bba5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cloudfoundry/routing_release |
purl2cpe | 2026-06-01 10:12:05.087747 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34041 |
vulnerable | 2026-06-08 06:06:24.267895 |
CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
MEDIUM (5.3)
Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.
Published: 2023-09-08T07:22:00.607Z
Updated: 2024-08-02T15:54:14.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5416 |
vulnerable | 2026-06-08 05:26:42.820921 |
CF clusters with NGINX in front of them may be vulnerable to DoS
HIGH (7.7)
Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.
Published: 2020-08-21T21:50:14.375Z
Updated: 2024-09-16T16:53:12.333Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15586 |
vulnerable | 2026-06-08 05:19:26.146966 |
Details available
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.
Published: 2020-07-17T15:38:24.000Z
Updated: 2024-08-04T13:22:29.273Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11289 |
vulnerable | 2026-06-08 05:12:36.823818 |
A forged route service request using an invalid nonce can cause the gorouter to panic and crash
HIGH (8.6)
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Published: 2019-11-19T18:41:04.566Z
Updated: 2024-09-16T22:14:00.610Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1221 |
vulnerable | 2026-06-08 05:11:17.220076 |
Details available
In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.
Published: 2018-03-19T18:00:00.000Z
Updated: 2024-09-17T01:15:36.021Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1193 |
vulnerable | 2026-06-08 05:11:17.158749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8034 |
vulnerable | 2026-06-08 05:10:06.993104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8218 |
vulnerable | 2026-06-08 05:08:13.870681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.