1 matches found
envoyproxy/envoy: incorrectly handles multiple HTTP headers in requests
An incorrect access control bypass vulnerability was found in envoy proxy/envoy. This flaw allows an attacker to send multiple HTTP headers where only the first one is valid. Envoy then forwards all of the headers as valid to the upstream component. This issue allows an attacker to subvert any...
8.3CVSS5.8AI score0.01317EPSS
SaveExploits1References5
20