CVE-2020-5420: Cloudfoundry Cf-Deployment

High severity, CVSS 7.7. EPSS: 1.2% chance of exploitation in the next 30 days.

Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.

Affected products

• Cloudfoundry Cf-Deployment: before 13.15.0 (fixed in 13.15.0)
• Cloudfoundry Gorouter: before 0.206.0 (fixed in 0.206.0)

Published 2020-09-03. Last modified 2026-06-17.