Description

Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.

Remediation

References

CVE-2020-25017

Related Vulnerabilities

WordPress Plugin Podlove Podcast Publisher Cross-Site Request Forgery (3.8.3)

Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2025-57752)

WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)

Next.js Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2025-32421)

Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-29168)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CVE-2020-25017