CVE-2023-34041

    Dashboard / Vulnerabilities / CVE-2023-34041

    CVE-2023-34041

    Published: 8 Sept 2023Last Modified: 12 Aug 2026

    Summary: CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter

    Details: Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34041.json, https://nvd.nist.gov/vuln/detail/CVE-2023-34041, https://www.cloudfoundry.org/blog/abuse-of-http-hop-by-hop-headers-in-cloud-foundry-gorouter/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -4a5d79d5298af90a447042f8a1abc7b6242e5693

    Affected versions

    v32.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-34041 | CVE-DB