| Package | Affected versions | Patched versions |
|---|---|---|
| code.cloudfoundry.org/gorouter | < 0.0.0-20191101214924-b1b5c44e050f | 0.0.0-20191101214924-b1b5c44e050f |
| github.com/cloudfoundry/gorouter | < 0.0.0-20191101214924-b1b5c44e050f | 0.0.0-20191101214924-b1b5c44e050f |
| cf-deployment | < 12.8.0 | 12.8.0 |
| routing-release | < 0.193.0 | 0.193.0 |
Cloud Foundry Routing, all versions before 0.0.0-20191101214924-b1b5c44e050f, does not properly validate nonce input. A remote unauthorized malicious user could forge a route service request using an invalid nonce that will cause the Gorouter to crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free