Lucene search
+L

1 matches found

Vulnrichment
Vulnrichment
added 2023/04/04 5:57 p.m.11 views

CVE-2023-27488 Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when failuremodeallow: true is configured for extauthz filter. For affected components that are used for loggin...

5.4CVSS9.6AI score0.00731EPSS
SaveExploits1References1
Rows per page
Query Builder