Vulnerabilities > Cloudfoundry > CF Deployment > 12.43.0

DATE CVE VULNERABILITY TITLE RISK
2020-08-21 CVE-2020-5416 Improper Resource Shutdown or Release vulnerability in Cloudfoundry Cf-Deployment
Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.
network
low complexity
cloudfoundry CWE-404
6.5
6.5
2020-07-17 CVE-2020-15586 Race Condition vulnerability in multiple products
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time. 		5.9
5.9