VDB
CVE-2020-25017
CVE-2020-25017
PUBLISHED
CVSS 8.300000190734863 HIGH
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
EPSS 1.32% · 70.6th percentile
Risk Scores
CVSS 3.1
8.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS Score
1.32%
70.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | envoy | 1.15.0, 0, 1.13.0 |
| Bitnami | envoy | 1.13.0, 1.15.0, 0 |
Timeline
- Sep 29, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 6, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
- Nov 13, 2022 EPSS Score