CVEvulnerability

CVE-2016-0713

4.7 MEDIUM Published 2017-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Affected configurations

• cloudfoundry cf-release 141 • cloudfoundry cf-release 142 • cloudfoundry cf-release 143 • cloudfoundry cf-release 144 • cloudfoundry cf-release 145 • cloudfoundry cf-release 146 • cloudfoundry cf-release 147 • cloudfoundry cf-release 148 • cloudfoundry cf-release 149 • cloudfoundry cf-release 150 • cloudfoundry cf-release 151 • cloudfoundry cf-release 152 • cloudfoundry cf-release 153 • cloudfoundry cf-release 154 • cloudfoundry cf-release 155 • cloudfoundry cf-release 156 • cloudfoundry cf-release 157 • cloudfoundry cf-release 158 • cloudfoundry cf-release 159 • cloudfoundry cf-release 160 • cloudfoundry cf-release 161 • cloudfoundry cf-release 162 • cloudfoundry cf-release 163 • cloudfoundry cf-release 164 • cloudfoundry cf-release 165 • cloudfoundry cf-release 166 • cloudfoundry cf-release 167 • cloudfoundry cf-release 168 • cloudfoundry cf-release 169 • cloudfoundry cf-release 170 • cloudfoundry cf-release 171 • cloudfoundry cf-release 172 • cloudfoundry cf-release 173 • cloudfoundry cf-release 174 • cloudfoundry cf-release 175 • cloudfoundry cf-release 176 • cloudfoundry cf-release 177 • cloudfoundry cf-release 178 • cloudfoundry cf-release 179 • cloudfoundry cf-release 180 • cloudfoundry cf-release 181 • cloudfoundry cf-release 182 • cloudfoundry cf-release 183 • cloudfoundry cf-release 184 • cloudfoundry cf-release 185 • cloudfoundry cf-release 186 • cloudfoundry cf-release 187 • cloudfoundry cf-release 188 • cloudfoundry cf-release 189 • cloudfoundry cf-release 190 • cloudfoundry cf-release 191 • cloudfoundry cf-release 192 • cloudfoundry cf-release 193 • cloudfoundry cf-release 194 • cloudfoundry cf-release 195 • cloudfoundry cf-release 196 • cloudfoundry cf-release 197 • cloudfoundry cf-release 198 • cloudfoundry cf-release 199 • cloudfoundry cf-release 200 … and 28 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References