CVE-2020-5401

5.3 mediumEPSS 1.0%

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWEs: CWE-444, CWE-393
Published: 2020-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:routing_release

References

https://www.cloudfoundry.org/blog/cve-2020-5401
https://www.cloudfoundry.org/blog/cve-2020-5401

Check your stack JSON