What’s Vulnerable › Vulnerabilities
CVE-2020-5401: Cloud Foundry GoRouter is vulnerable to cache poisoning
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-02-27 · updated 2026-06-17
- Weakness: CWE-393
Description
Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.
Affected products
- Cloud Foundry Routing: before 0.197.0 — fixed in 0.197.0
How to fix
Upgrade to a fixed version: Cloud Foundry Routing 0.197.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2020-5401 or the next vulnerability affects your stack