Read the docs
TI-2016-00642 Aliases CVE-2016-0713GHSA-84x8-jf5h-4974

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers…

Priority LOW 22CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Why it matters now

EPSS 0.00541 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 88

CPEVersionsRoleVendor
cpe:2.3:a:cloudfoundry:cf-release:141:*:*:*:*:*:*:*141VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:142:*:*:*:*:*:*:*142VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:143:*:*:*:*:*:*:*143VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:144:*:*:*:*:*:*:*144VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:145:*:*:*:*:*:*:*145VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:146:*:*:*:*:*:*:*146VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:147:*:*:*:*:*:*:*147VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:148:*:*:*:*:*:*:*148VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:149:*:*:*:*:*:*:*149VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:150:*:*:*:*:*:*:*150VulnerableCloudFoundry Foundation
Show 78 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cloudfoundry:cf-release:151:*:*:*:*:*:*:*151VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:152:*:*:*:*:*:*:*152VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:153:*:*:*:*:*:*:*153VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:154:*:*:*:*:*:*:*154VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:155:*:*:*:*:*:*:*155VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:156:*:*:*:*:*:*:*156VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:157:*:*:*:*:*:*:*157VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:158:*:*:*:*:*:*:*158VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:159:*:*:*:*:*:*:*159VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:160:*:*:*:*:*:*:*160VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:161:*:*:*:*:*:*:*161VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:162:*:*:*:*:*:*:*162VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:163:*:*:*:*:*:*:*163VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:164:*:*:*:*:*:*:*164VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:165:*:*:*:*:*:*:*165VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:166:*:*:*:*:*:*:*166VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:167:*:*:*:*:*:*:*167VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:168:*:*:*:*:*:*:*168VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:169:*:*:*:*:*:*:*169VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:170:*:*:*:*:*:*:*170VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:171:*:*:*:*:*:*:*171VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:172:*:*:*:*:*:*:*172VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:173:*:*:*:*:*:*:*173VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:174:*:*:*:*:*:*:*174VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:175:*:*:*:*:*:*:*175VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:176:*:*:*:*:*:*:*176VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:177:*:*:*:*:*:*:*177VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:178:*:*:*:*:*:*:*178VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:179:*:*:*:*:*:*:*179VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:180:*:*:*:*:*:*:*180VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:181:*:*:*:*:*:*:*181VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:182:*:*:*:*:*:*:*182VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:183:*:*:*:*:*:*:*183VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:184:*:*:*:*:*:*:*184VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:185:*:*:*:*:*:*:*185VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:186:*:*:*:*:*:*:*186VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:187:*:*:*:*:*:*:*187VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:188:*:*:*:*:*:*:*188VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:189:*:*:*:*:*:*:*189VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:190:*:*:*:*:*:*:*190VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:191:*:*:*:*:*:*:*191VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:192:*:*:*:*:*:*:*192VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:193:*:*:*:*:*:*:*193VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:194:*:*:*:*:*:*:*194VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:195:*:*:*:*:*:*:*195VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:196:*:*:*:*:*:*:*196VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:197:*:*:*:*:*:*:*197VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:198:*:*:*:*:*:*:*198VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:199:*:*:*:*:*:*:*199VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:200:*:*:*:*:*:*:*200VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:201:*:*:*:*:*:*:*201VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:202:*:*:*:*:*:*:*202VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:203:*:*:*:*:*:*:*203VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:204:*:*:*:*:*:*:*204VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:205:*:*:*:*:*:*:*205VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:206:*:*:*:*:*:*:*206VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*207VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:208:*:*:*:*:*:*:*208VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:209:*:*:*:*:*:*:*209VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:210:*:*:*:*:*:*:*210VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:211:*:*:*:*:*:*:*211VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:212:*:*:*:*:*:*:*212VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:213:*:*:*:*:*:*:*213VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:214:*:*:*:*:*:*:*214VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:215:*:*:*:*:*:*:*215VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:216:*:*:*:*:*:*:*216VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:217:*:*:*:*:*:*:*217VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:218:*:*:*:*:*:*:*218VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:219:*:*:*:*:*:*:*219VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:220:*:*:*:*:*:*:*220VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:221:*:*:*:*:*:*:*221VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:222:*:*:*:*:*:*:*222VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:223:*:*:*:*:*:*:*223VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:224:*:*:*:*:*:*:*224VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:225:*:*:*:*:*:*:*225VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:226:*:*:*:*:*:*:*226VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:227:*:*:*:*:*:*:*227VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cf-release:228:*:*:*:*:*:*:*228VulnerableCloudFoundry Foundation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-0713
  2. 2026-10-03 Alias added: GHSA-84x8-jf5h-4974

References

Advisory 1

Other 1

  • TI-2016-05702 Command injection in Cloud Foundry CVSS 3.0CRITICAL 9.8
  • TI-2016-06771 Improper input validation in Cloud Foundry CVSS 3.0CRITICAL 9.8
  • TI-2017-03116 Improper privilege management in Cloud Foundry CVSS 3.1CRITICAL 9.8
  • TI-2015-04340 Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry… CVSS 3.1CRITICAL 9.8
  • TI-2015-04339 The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA… CVSS 3.1CRITICAL 9.8
  • TI-2016-05705 Applications in cf-release before 245 can be configured and pushed with a user-provided… CVSS 3.0CRITICAL 9.6
See all 34 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences