high7.7
CVE-2020-5420
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pu…
Impact
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Cf-Deployment | before 13.15.0 |
| Cloudfoundry | Gorouter | before 0.206.0 |