code.cloudfoundry.org/gorouter vulnerabilities

Latest code.cloudfoundry.org/gorouter CVEs

Newest publication first

1. CVE-2019-11289 Cloud Foundry Routing Improper Input Validation vulnerability

   Published 2019-11-19

   High·CVSS 8.6

   Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.