PT-2020-15892 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.15.0 Description: The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy header map API does not replace all existin...