CVE-2024-22279

概要

参考情報

• cloudfoundry.org/blog/cve-2024-22279-gorouter-denial-of-service-attack · Vendor Advisory

cf-deployment のその他の脆弱性

• CVE-2026-22726中 5.0Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a mali…
• CVE-2026-22723中 6.5Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78…
• CVE-2025-22246高 7.5Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
• CVE-2023-34041中 5.3Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can …
• CVE-2023-20882中 5.9In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of…