CVE-2020-25017

Published: Oct 1, 2020Modified: Jun 17, 2026

8.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.7

Source: NVD

Description

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.

Affected (4)

Products: Envoyproxy: Envoy

Envoyproxy

1 product

Envoy

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Envoyproxy Envoy	Before 1.12.7
Envoyproxy Envoy	From 1.13.0 to 1.13.4
Envoyproxy Envoy	From 1.14.0 to 1.14.4
Envoyproxy Envoy	From 1.15.0 to 1.15.1

References (4)

https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w

Source: cve@mitre.org

ExploitThird Party Advisory

https://groups.google.com/forum/#%21forum/envoy-security-announce

Source: cve@mitre.org

https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://groups.google.com/forum/#%21forum/envoy-security-announce

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.