Lucene search
+L

1 matches found

OSV
OSV
added 2024/03/06 10:54 a.m.33 views

BIT-ENVOY-2023-27488 Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when failuremodeallow: true is configured for extauthz filter. For affected components that are used for loggin...

9.8CVSS7.4AI score0.00731EPSS
SaveExploits1References2
Rows per page
Query Builder