Researchers
Back
Mark D. Roth
Researcher from
Google LLC
#35592
of 60,574
8.3
Total CVSS
Vulnerabilities
·
1
PT-2020-15892
2020-10-01
8.3
CVE-2020-25017
Envoy
Envoy
The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy() header map API does not replace all existing occurrences of a non-inline header.