Description

Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.

Remediation

References

CVE-2020-25018

Related Vulnerabilities

WordPress Plugin MDTF-Wordpress Meta Data & Taxonomies Filter Cross-Site Request Forgery (2.2.7.2)

WordPress Plugin WooCommerce Customers Manager Multiple Vulnerabilities (26.5)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-56588)

MySQL CVE-2016-0668 Vulnerability (CVE-2016-0668)

Ruby Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-31799)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2020-25018