Cloud Foundry CAPI vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20204

Newest CVEs

• CVE-2020-5423

  Cloud Controller is vulnerable to denial of service via YAML parsing

  Cloud Foundry · CAPI

  High7.5
• CVE-2020-5418

  Cloud Controller allows users with no roles to list droplets

  Cloud Foundry · CAPI

  Low3.1
• CVE-2020-5417

  Cloud Controller may allow developers to claim sensitive routes

  Cloud Foundry · CAPI

  High8.5
• CVE-2020-5400

  Cloud Controller logs environment variables from app manifests

  Cloud Foundry · CAPI

  High8.0
• CVE-2019-11294

  CAPI leaks service broker URLs and GUIDs to space developers

  Cloud Foundry · CAPI

  Medium4.3
• CVE-2019-3785

  Cloud Controller provides signed URL with write authorization to read only user

  Cloud Foundry · CAPI

  Medium6.5