CVE-2020-5401

medium

Description

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

References

https://www.cloudfoundry.org/blog/cve-2020-5401

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26580

Details

Source: Mitre, NVD

Published: 2020-02-27

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L