4.7

CVE-2016-0713

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cloudfoundry ≫ Cf-release Version 141
Cloudfoundry ≫ Cf-release Version 142
Cloudfoundry ≫ Cf-release Version 143
Cloudfoundry ≫ Cf-release Version 144
Cloudfoundry ≫ Cf-release Version 145
Cloudfoundry ≫ Cf-release Version 146
Cloudfoundry ≫ Cf-release Version 147
Cloudfoundry ≫ Cf-release Version 148
Cloudfoundry ≫ Cf-release Version 149
Cloudfoundry ≫ Cf-release Version 150
Cloudfoundry ≫ Cf-release Version 151
Cloudfoundry ≫ Cf-release Version 152
Cloudfoundry ≫ Cf-release Version 153
Cloudfoundry ≫ Cf-release Version 154
Cloudfoundry ≫ Cf-release Version 155
Cloudfoundry ≫ Cf-release Version 156
Cloudfoundry ≫ Cf-release Version 157
Cloudfoundry ≫ Cf-release Version 158
Cloudfoundry ≫ Cf-release Version 159
Cloudfoundry ≫ Cf-release Version 160
Cloudfoundry ≫ Cf-release Version 161
Cloudfoundry ≫ Cf-release Version 162
Cloudfoundry ≫ Cf-release Version 163
Cloudfoundry ≫ Cf-release Version 164
Cloudfoundry ≫ Cf-release Version 165
Cloudfoundry ≫ Cf-release Version 166
Cloudfoundry ≫ Cf-release Version 167
Cloudfoundry ≫ Cf-release Version 168
Cloudfoundry ≫ Cf-release Version 169
Cloudfoundry ≫ Cf-release Version 170
Cloudfoundry ≫ Cf-release Version 171
Cloudfoundry ≫ Cf-release Version 172
Cloudfoundry ≫ Cf-release Version 173
Cloudfoundry ≫ Cf-release Version 174
Cloudfoundry ≫ Cf-release Version 175
Cloudfoundry ≫ Cf-release Version 176
Cloudfoundry ≫ Cf-release Version 177
Cloudfoundry ≫ Cf-release Version 178
Cloudfoundry ≫ Cf-release Version 179
Cloudfoundry ≫ Cf-release Version 180
Cloudfoundry ≫ Cf-release Version 181
Cloudfoundry ≫ Cf-release Version 182
Cloudfoundry ≫ Cf-release Version 183
Cloudfoundry ≫ Cf-release Version 184
Cloudfoundry ≫ Cf-release Version 185
Cloudfoundry ≫ Cf-release Version 186
Cloudfoundry ≫ Cf-release Version 187
Cloudfoundry ≫ Cf-release Version 188
Cloudfoundry ≫ Cf-release Version 189
Cloudfoundry ≫ Cf-release Version 190
Cloudfoundry ≫ Cf-release Version 191
Cloudfoundry ≫ Cf-release Version 192
Cloudfoundry ≫ Cf-release Version 193
Cloudfoundry ≫ Cf-release Version 194
Cloudfoundry ≫ Cf-release Version 195
Cloudfoundry ≫ Cf-release Version 196
Cloudfoundry ≫ Cf-release Version 197
Cloudfoundry ≫ Cf-release Version 198
Cloudfoundry ≫ Cf-release Version 199
Cloudfoundry ≫ Cf-release Version 200
Cloudfoundry ≫ Cf-release Version 201
Cloudfoundry ≫ Cf-release Version 202
Cloudfoundry ≫ Cf-release Version 203
Cloudfoundry ≫ Cf-release Version 204
Cloudfoundry ≫ Cf-release Version 205
Cloudfoundry ≫ Cf-release Version 206
Cloudfoundry ≫ Cf-release Version 207
Cloudfoundry ≫ Cf-release Version 208
Cloudfoundry ≫ Cf-release Version 209
Cloudfoundry ≫ Cf-release Version 210
Cloudfoundry ≫ Cf-release Version 211
Cloudfoundry ≫ Cf-release Version 212
Cloudfoundry ≫ Cf-release Version 213
Cloudfoundry ≫ Cf-release Version 214
Cloudfoundry ≫ Cf-release Version 215
Cloudfoundry ≫ Cf-release Version 216
Cloudfoundry ≫ Cf-release Version 217
Cloudfoundry ≫ Cf-release Version 218
Cloudfoundry ≫ Cf-release Version 219
Cloudfoundry ≫ Cf-release Version 220
Cloudfoundry ≫ Cf-release Version 221
Cloudfoundry ≫ Cf-release Version 222
Cloudfoundry ≫ Cf-release Version 223
Cloudfoundry ≫ Cf-release Version 224
Cloudfoundry ≫ Cf-release Version 225
Cloudfoundry ≫ Cf-release Version 226
Cloudfoundry ≫ Cf-release Version 227
Cloudfoundry ≫ Cf-release Version 228
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.411
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.7 1.6 2.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229
Third Party Advisory
Release Notes
https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/