Description (CNA)
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cloud Foundry / Routing | affected All before 0.206.0 |
| Cloud Foundry / CF Deployment | affected All before 13.15.0 |
CWE
CWE-754
References
ADP enrichment
No English description supplied.