PT-2020-15893

CVE-2020-25018

Published

2020-10-01

Updated

2020-10-09

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Envoy versions between 2d69e30 and 3b5acb2

Description The issue is related to the parsing of request URLs that require host canonicalization.

Recommendations For versions between 2d69e30 and 3b5acb2, update to a version outside of this range to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

GHSA-FWWH-FC9W-9673

Found an issue in the description? Have something to add? Feel free to write us 👾