Description

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers.

Remediation

References

CVE-2019-18802

Related Vulnerabilities

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Unspecified Vulnerability (1.7.56)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-4043)

WordPress Plugin Faster and Easier scroll to Top for WordPress-Smart Scroll to Top Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.3)

Oracle JRE CVE-2023-21937 Vulnerability (CVE-2023-21937)

WordPress Plugin Campaign Press Cross-Site Scripting (1.0.5)

Severity

Critical

Classification

CVE-2019-18802 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities