CVE-2016-0713: Cloudfoundry Cf-Release

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Affected products

• Cloudfoundry Cf-Release: version 141 only; version 142 only; version 143 only; version 144 only; version 145 only; version 146 only; …

Published 2017-08-31. Last modified 2026-06-17.