TI-2026-18251 CVE-2026-22726 · GHSA-rmvv-67vj-q642
Route Services Firewall Bypass
Priority LOW 22
Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.
Vulnerabilities
5 records
TI-2024-14866 CVE-2024-22279 · GHSA-3cff-hppc-4g4r
GoRouter Denial of Service Attack
Priority LOW 33
Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrade the service availability of the Cloud Foundry deployment if performed at scale.
TI-2023-07298 CVE-2023-20882 · GHSA-f2f8-4q6m-2pw8
Uncontrolled resource consumption in Cloud Foundry Routing release
Priority LOW 27
In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry.
TI-2020-04447 CVE-2020-5401 · GHSA-jgr4-5mrv-w8ph
Cloud Foundry GoRouter is vulnerable to cache poisoning
Priority LOW 26
Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app…
TI-2019-02803 CVE-2019-3789 · GHSA-r999-j7hp-qmgq
Gorouter allows space developer to hijack route services hosted outside the platform
Priority LOW 30
Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform.