https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:12:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02075 bdu:2019-02075 https://cve.radiocsirt.org/vuln/bdu:2019-02075 https://cve.radiocsirt.org/vuln/euvd-2026-53207 EUVD-2026-53207 https://cve.radiocsirt.org/vuln/euvd-2026-53207 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9901 <p>Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin. A backend server could then interpret the non-normalized path and provide an attacker access beyond the scope provided for by the access control policy.</p> <p>Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin. A backend server could then interpret the non-normalized path and provide an attacker access beyond the scope provided for by the access control policy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9901 https://cve.radiocsirt.org/vuln/ghsa-2wmf-p7f8-w42h <p><strong>Affected:</strong> Go: github.com/envoyproxy/envoy</p> <p>Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., `something/../admin`, to bypass access control, e.g., a block on `/admin`. A backend server could then interpret the non-normalized path and provide an attacker access beyond the scope provided for by the access control policy.</p> <p><strong>Affected:</strong> Go: github.com/envoyproxy/envoy</p> <p>Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., `something/../admin`, to bypass access control, e.g., a block on `/admin`. A backend server could then interpret the non-normalized path and provide an attacker access beyond the scope provided for by the access control policy.</p> https://cve.radiocsirt.org/vuln/ghsa-2wmf-p7f8-w42h https://cve.radiocsirt.org/vuln/gsd-2019-9901 gsd-2019-9901 https://cve.radiocsirt.org/vuln/gsd-2019-9901 https://cve.radiocsirt.org/vuln/rhsa-2019:0741 <p>istio/envoy: Authorization bypass via null characters injection in HTTP/1.x istio/envoy: Path traversal via URL Patch manipulation in HTTP/1.x header</p> <p>istio/envoy: Authorization bypass via null characters injection in HTTP/1.x istio/envoy: Path traversal via URL Patch manipulation in HTTP/1.x header</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0741