← Back

CVE-2016-0713

nvd nist
Published: Aug 31, 2017Modified: May 13, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 1.6 / Impact: 2.7
Source: NVD

Description

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Affected (88)

Cloudfoundry
1 product
Cf Release
Configuration A
88 vulnerable
Vulnerable SoftwareAffected Versions
Cloudfoundry
Cf Release
Version 141
Cf Release
Version 142
Cf Release
Version 143
Cf Release
Version 144
Cf Release
Version 145
Cf Release
Version 146
Cf Release
Version 147
Cf Release
Version 148
Cf Release
Version 149
Cf Release
Version 150
Cf Release
Version 151
Cf Release
Version 152
Cf Release
Version 153
Cf Release
Version 154
Cf Release
Version 155
Cf Release
Version 156
Cf Release
Version 157
Cf Release
Version 158
Cf Release
Version 159
Cf Release
Version 160
Cf Release
Version 161
Cf Release
Version 162
Cf Release
Version 163
Cf Release
Version 164
Cf Release
Version 165
Cf Release
Version 166
Cf Release
Version 167
Cf Release
Version 168
Cf Release
Version 169
Cf Release
Version 170
Cf Release
Version 171
Cf Release
Version 172
Cf Release
Version 173
Cf Release
Version 174
Cf Release
Version 175
Cf Release
Version 176
Cf Release
Version 177
Cf Release
Version 178
Cf Release
Version 179
Cf Release
Version 180
Cf Release
Version 181
Cf Release
Version 182
Cf Release
Version 183
Cf Release
Version 184
Cf Release
Version 185
Cf Release
Version 186
Cf Release
Version 187
Cf Release
Version 188
Cf Release
Version 189
Cf Release
Version 190
Cf Release
Version 191
Cf Release
Version 192
Cf Release
Version 193
Cf Release
Version 194
Cf Release
Version 195
Cf Release
Version 196
Cf Release
Version 197
Cf Release
Version 198
Cf Release
Version 199
Cf Release
Version 200
Cf Release
Version 201
Cf Release
Version 202
Cf Release
Version 203
Cf Release
Version 204
Cf Release
Version 205
Cf Release
Version 206
Cf Release
Version 207
Cf Release
Version 208
Cf Release
Version 209
Cf Release
Version 210
Cf Release
Version 211
Cf Release
Version 212
Cf Release
Version 213
Cf Release
Version 214
Cf Release
Version 215
Cf Release
Version 216
Cf Release
Version 217
Cf Release
Version 218
Cf Release
Version 219
Cf Release
Version 220
Cf Release
Version 221
Cf Release
Version 222
Cf Release
Version 223
Cf Release
Version 224
Cf Release
Version 225
Cf Release
Version 226
Cf Release
Version 227
Cf Release
Version 228

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

Source: secalert@redhat.com
Release NotesThird Party Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.