Cloudfoundry: >> Cf-Deployment >> 30.9.0 Security Vulnerabilities
Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrade
the service availability of the Cloud Foundry deployment if performed at scale.
CVSS Score
5.9
EPSS Score
0.005
Published
2024-06-10
Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.
CVSS Score
5.3
EPSS Score
0.002
Published
2023-09-08