CVE-2020-25017
CVE-2020-25017
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →