Input Validation and Logic

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. A forged route service request using an invalid nonce can cause the gorouter to panic and crashCVE-2019-11289Cloud Foundry · CVSS 8.6 · 1.5% likely

   CWE-20

2. An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JW…CVE-2016-8218Cloudfoundry · 1.3% likely

   CWE-20

3. Gorouter is vulnerable to DoS attack via invalid HTTP responsesCVE-2020-5420Cloud Foundry · CVSS 7.7 · 1.2% likely

   CWE-754

4. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions…CVE-2017-4994Cloudfoundry · 1.1% likely

   CWE-20

5. UAA defaults email address to an insecure domainCVE-2019-3787Cloud Foundry · CVSS 8.3 · 1.1% likely

   CWE-840

6. Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown w…CVE-2018-1269Cloud Foundry · 1.0% likely

   CWE-755

7. Cloud Foundry GoRouter is vulnerable to cache poisoningCVE-2020-5401Cloud Foundry · CVSS 5.3 · 1.0% likely

   CWE-393

8. Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not validate app GUID stru…CVE-2018-1268Cloud Foundry · 1.0% likely

   CWE-20

9. Gorouter allows space developer to hijack route services hosted outside the platformCVE-2019-3789Cloud Foundry · CVSS 8.8 · 0.8% likely

   CWE-840

10. Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA CompromiseCVE-2026-59335Cloud Foundry · CVSS 8.7 · 0.5% likely

    CWE-178

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.