What’s Vulnerable › Vulnerabilities

CVE-2016-0713

• Severity: medium (CVSS 4.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-31 · updated 2026-06-17
• Weakness: CWE-79

Description

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Affected products

• Cloud Foundry Cloud Controller cf-release versions prior to v255: 141, 142, 143, 144, 145, 146 (+82)

References

• https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229
• https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/
• https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229
• https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/

Get alerted when CVE-2016-0713 or the next vulnerability affects your stack