Skip to main content

Improper Encoding or Escaping of Output

CVE-2023-35941

High
9.8/10

Summary

Envoy is an open-source edge and service proxy designed for cloud-native applications. In github.com/envoyproxy/envoy versions prior to 1.23.12, 1.24.x prior to 1.24.10, 1.25.x prior to 1.25.9, and 1.26.x prior to 1.26.4, a malicious client can construct credentials with permanent validity in some specific scenarios. This is caused by some rare scenarios in which HMAC payload can always be valid in OAuth2 filter's check. Avoid wildcards/prefix domain wildcards in the host's domain configuration as a workaround.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-116 - Improper Encoding or Escaping of Output

The software prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

References

Advisory Timeline

  • Published