CVE-2019-11289 — A forged route service request using an invalid nonce can cause the gorouter to panic and crash
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request usi…
Published: 2019-11-19 · CVSS: 8.6 · CVSS 3.0
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7