Cloud Foundry Router vulnerabilities

1 known vulnerability affecting cloud_foundry/cloud_foundry_router.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-1193MEDIUMCVSS 5.3vversions prior to 0.175.02018-05-23

CVE-2018-1193 [MEDIUM] CVE-2018-1193: Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-For Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections.