Null pointer dereference

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app...

CVE-2020-5401

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app...

PT-2018-10914

Name of the Vulnerable Software and Affected Versions Cloud Foundry routing-release versions prior to 0.175.0 Description The issue lacks sanitization for user-provided X-Forwarded-Proto headers, allowing a remote user to potentially bypass an application requirement to only respond over secure...

CVE-2018-1193: Undefined Security Weakness

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...