Security Advisory

CVE-2018-1193

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-23 15:00:00

Last updated 2024-09-17 03:47:48

Assigner dell

CVSS score not scored

State PUBLISHED

Description

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections.

← Browse all CVEs View on cve.org ↗