الباحثون
رجوع
Matt Klein
باحث من
Lyft
#19691
من 60,574
15.8
إجمالي CVSS
الثغرات
·
2
عالية
2
PT-2020-15892
2020-10-01
8.3
CVE-2020-25017
Envoy
Envoy
The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy() header map API does not replace all existing occurrences of a non-inline header.
PT-2020-13163
2020-07-01
7.5
CVE-2020-12604
Envoy
Envoy
The issue arises when an HTTP/2 client requests a large payload but fails to send sufficient window updates to consume the entire stream and does not reset the stream, leading to increased memory usage.