Lucene search
+L

3 matches found

Mend
Mend
•added 2023/09/08 7:22 a.m.•2 views

CVE-2023-34041

Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations...

6.9CVSS0.00436EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/08 12:00 a.m.•5 views

CVE-2023-34041: Undefined Security Weakness

Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations...

5.3CVSS5.9AI score0.00436EPSS
SaveExploits0References1
Cloud Foundry
Cloud Foundry
•added 2023/09/07 12:00 a.m.•23 views

CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter | Cloud Foundry

Severity Medium Vendor Cloud Foundry Description Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the...

5.3CVSS5.3AI score0.00436EPSS
SaveExploits0
Rows per page
Query Builder