Description (CNA)
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://groups.google.com/forum/#%21forum/envoy-security-announce
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w
ADP enrichment
No English description supplied.