Lucene search
+L

116 matches found

OSV
OSV
•added 2026/09/29 8:43 a.m.•6 views

BIT-ENVOY-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

5.3CVSS5.9AI score0.00554EPSS
SaveExploits0References10
Rows per page
Query Builder