CVE-2020-5401

2020-02-2720:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

CPENameOperatorVersion
routing-releaseeq0.140.0
routing-releaseeq0.170.0
routing-releaseeq0.152.0
routing-releaseeq0.161.0
routing-releaseeq0.141.0
routing-releaseeq0.154.0
routing-releaseeq0.174.0
routing-releaseeq0.135.0
routing-releaseeq0.172.0
routing-releaseeq0.149.0

Name	Operator	Version
routing-release	eq	0.140.0
routing-release	eq	0.170.0
routing-release	eq	0.152.0
routing-release	eq	0.161.0
routing-release	eq	0.141.0
routing-release	eq	0.154.0
routing-release	eq	0.174.0
routing-release	eq	0.135.0
routing-release	eq	0.172.0
routing-release	eq	0.149.0