CVE-2016-0713 Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
MediumCVSS 4.7
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry cf-release | = 141 | No fix listed |
| cloudfoundry cf-release | = 142 | No fix listed |
| cloudfoundry cf-release | = 143 | No fix listed |
| cloudfoundry cf-release | = 144 | No fix listed |
| cloudfoundry cf-release | = 145 | No fix listed |
| cloudfoundry cf-release | = 146 | No fix listed |
| cloudfoundry cf-release | = 147 | No fix listed |
| cloudfoundry cf-release | = 148 | No fix listed |
| cloudfoundry cf-release | = 149 | No fix listed |
| cloudfoundry cf-release | = 150 | No fix listed |
| cloudfoundry cf-release | = 151 | No fix listed |
| cloudfoundry cf-release | = 152 | No fix listed |
| cloudfoundry cf-release | = 153 | No fix listed |
| cloudfoundry cf-release | = 154 | No fix listed |
| cloudfoundry cf-release | = 155 | No fix listed |
| cloudfoundry cf-release | = 156 | No fix listed |
| cloudfoundry cf-release | = 157 | No fix listed |
| cloudfoundry cf-release | = 158 | No fix listed |
| cloudfoundry cf-release | = 159 | No fix listed |
| cloudfoundry cf-release | = 160 | No fix listed |
| cloudfoundry cf-release | = 161 | No fix listed |
| cloudfoundry cf-release | = 162 | No fix listed |
| cloudfoundry cf-release | = 163 | No fix listed |
| cloudfoundry cf-release | = 164 | No fix listed |
| cloudfoundry cf-release | = 165 | No fix listed |
Show 63 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry cf-release | = 166 | No fix listed |
| cloudfoundry cf-release | = 167 | No fix listed |
| cloudfoundry cf-release | = 168 | No fix listed |
| cloudfoundry cf-release | = 169 | No fix listed |
| cloudfoundry cf-release | = 170 | No fix listed |
| cloudfoundry cf-release | = 171 | No fix listed |
| cloudfoundry cf-release | = 172 | No fix listed |
| cloudfoundry cf-release | = 173 | No fix listed |
| cloudfoundry cf-release | = 174 | No fix listed |
| cloudfoundry cf-release | = 175 | No fix listed |
| cloudfoundry cf-release | = 176 | No fix listed |
| cloudfoundry cf-release | = 177 | No fix listed |
| cloudfoundry cf-release | = 178 | No fix listed |
| cloudfoundry cf-release | = 179 | No fix listed |
| cloudfoundry cf-release | = 180 | No fix listed |
| cloudfoundry cf-release | = 181 | No fix listed |
| cloudfoundry cf-release | = 182 | No fix listed |
| cloudfoundry cf-release | = 183 | No fix listed |
| cloudfoundry cf-release | = 184 | No fix listed |
| cloudfoundry cf-release | = 185 | No fix listed |
| cloudfoundry cf-release | = 186 | No fix listed |
| cloudfoundry cf-release | = 187 | No fix listed |
| cloudfoundry cf-release | = 188 | No fix listed |
| cloudfoundry cf-release | = 189 | No fix listed |
| cloudfoundry cf-release | = 190 | No fix listed |
| cloudfoundry cf-release | = 191 | No fix listed |
| cloudfoundry cf-release | = 192 | No fix listed |
| cloudfoundry cf-release | = 193 | No fix listed |
| cloudfoundry cf-release | = 194 | No fix listed |
| cloudfoundry cf-release | = 195 | No fix listed |
| cloudfoundry cf-release | = 196 | No fix listed |
| cloudfoundry cf-release | = 197 | No fix listed |
| cloudfoundry cf-release | = 198 | No fix listed |
| cloudfoundry cf-release | = 199 | No fix listed |
| cloudfoundry cf-release | = 200 | No fix listed |
| cloudfoundry cf-release | = 201 | No fix listed |
| cloudfoundry cf-release | = 202 | No fix listed |
| cloudfoundry cf-release | = 203 | No fix listed |
| cloudfoundry cf-release | = 204 | No fix listed |
| cloudfoundry cf-release | = 205 | No fix listed |
| cloudfoundry cf-release | = 206 | No fix listed |
| cloudfoundry cf-release | = 207 | No fix listed |
| cloudfoundry cf-release | = 208 | No fix listed |
| cloudfoundry cf-release | = 209 | No fix listed |
| cloudfoundry cf-release | = 210 | No fix listed |
| cloudfoundry cf-release | = 211 | No fix listed |
| cloudfoundry cf-release | = 212 | No fix listed |
| cloudfoundry cf-release | = 213 | No fix listed |
| cloudfoundry cf-release | = 214 | No fix listed |
| cloudfoundry cf-release | = 215 | No fix listed |
| cloudfoundry cf-release | = 216 | No fix listed |
| cloudfoundry cf-release | = 217 | No fix listed |
| cloudfoundry cf-release | = 218 | No fix listed |
| cloudfoundry cf-release | = 219 | No fix listed |
| cloudfoundry cf-release | = 220 | No fix listed |
| cloudfoundry cf-release | = 221 | No fix listed |
| cloudfoundry cf-release | = 222 | No fix listed |
| cloudfoundry cf-release | = 223 | No fix listed |
| cloudfoundry cf-release | = 224 | No fix listed |
| cloudfoundry cf-release | = 225 | No fix listed |
| cloudfoundry cf-release | = 226 | No fix listed |
| cloudfoundry cf-release | = 227 | No fix listed |
| cloudfoundry cf-release | = 228 | No fix listed |
References
- bosh.io release-notes third-party-advisory
- [cf-dev] 20160201 CVE-2016-0713 Gorouter XSS mailing-list