Description Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. Remediation References CVE-2020-25018 Related Vulnerabilities PHP Improper Input Validation Vulnerability (CVE-2013-4636) Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6658) phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-0788) Oracle JRE CVE-2013-0449 Vulnerability (CVE-2013-0449) Oracle Application Server CVE-2006-0291 Vulnerability (CVE-2006-0291) Severity High Classification CVE-2020-25018 Tags Missing Update Known Vulnerabilities