Security Advisory
CVE-2020-25017
8.3
HIGH
Vulnerability Description
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
Published Date
October 1, 2020
Official Source
NIST NVD Advisory