CVE-2016-0713

2017-08-3114:00:00

redhat

www.cve.org

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

References

bosh.io/releases/github.com/cloudfoundry/cf-release?version=229

lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/