Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/24 3:19 p.m.11 views

GHSA-X4MJ-7F9G-29H4 Contour has Lua code injection via Cookie Path Rewrite Policy

Impact Contour's Cookie Rewriting feature is vulnerable to Lua code injection. An attacker with RBAC permissions to create or modify HTTPProxy resources can craft a malicious value in the following fields that results in arbitrary code execution in the Envoy proxy: -...

8.1CVSS6.4AI score0.00482EPSS
SaveExploits0References11
Rows per page
Query Builder