CVE-2020-5423: Cloudfoundry Capi-Release

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files to certain endpoints, causing the YAML parser to consume excessive CPU and RAM.

Affected products

• Cloudfoundry Capi-Release: before 1.101.0 (fixed in 1.101.0)
• Cloudfoundry Cf-Deployment: before 15.0.0 (fixed in 15.0.0)

Published 2020-12-02. Last modified 2026-06-17.