CVE-2018-1193

MEDIUM · CVSS 5.3 EPSS 1.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-1193

Severity

MEDIUM

CVSS

5.3

EPSS

1.11%

Original Filing — NVD Description

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections.