Cloudfoundry Gorouter vulnerabilities

1 known vulnerability affecting cloudfoundry/gorouter.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-5420HIGHCVSS 7.7fixed in 0.206.02020-09-03

CVE-2020-5420 [HIGH] CWE-754 CVE-2020-5420: Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.