CVE-2024-7207

envoy: Server-side request forgery via HTTP header manipulation

View on CVE.org

Published Sep 19, 2024 CVSS 3.1 · 7.4 High EPSS n/a KEV · Not listed

Description

Duplicate of CVE-2024-45806.

Affected Products

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/envoyproxy/envoy/security/advisories/GHSA-ffhv-fvxq-r6mf
https://nvd.nist.gov/vuln/detail/CVE-2024-7207
https://www.cve.org/CVERecord?id=CVE-2024-7207

History

Oct 30, 2024 2:30 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`	cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}`

Sep 30, 2024 7:45 PM Weaknesses updated. Affected versions updated. Affected vendors updated. References updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses	NVD-CWE-noinfo
CPEs	cpe:2.3:a:envoyproxy:envoy:::::::: cpe:2.3:a:redhat:openshift_service_mesh:2.0:::::::*
Vendors & Products	Envoyproxy Envoyproxy envoy Redhat Redhat openshift Service Mesh
References	https://access.redhat.com/security/cve/CVE-2024-7207 https://bugzilla.redhat.com/show_bug.cgi?id=2300352
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`

Sep 30, 2024 7:30 PM Title updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Title	Envoy: server-side request forgery via http header manipulation	envoy: Server-side request forgery via HTTP header manipulation
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 30, 2024 7:15 PM Description updated. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description	A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to internal-only services or arbitrary external systems. This is a regression of the fix for CVE-2023-27487.	Duplicate of CVE-2024-45806.
CPEs	~~cpe:/a:redhat:service_mesh:2~~
Vendors & Products	Redhat service Mesh
Metrics	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Sep 25, 2024 6:15 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Envoyproxy Envoyproxy envoy Redhat openshift Service Mesh
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:envoyproxy:envoy:::::::: cpe:2.3:a:redhat:openshift_service_mesh:2.0:::::::*
Vendors & Products		Envoyproxy Envoyproxy envoy Redhat openshift Service Mesh

Sep 24, 2024 8:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}`	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`

Sep 24, 2024 7:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}`

Sep 20, 2024 2:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 20, 2024 1:00 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2024-7207 https://www.cve.org/CVERecord?id=CVE-2024-7207
Metrics	threat_severity `None`	threat_severity `Important`

Sep 19, 2024 10:30 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to internal-only services or arbitrary external systems. This is a regression of the fix for CVE-2023-27487.
Title		Envoy: server-side request forgery via http header manipulation
First Time appeared		Redhat Redhat service Mesh
Weaknesses		CWE-20
CPEs		cpe:/a:redhat:service_mesh:2
Vendors & Products		Redhat Redhat service Mesh
References		https://access.redhat.com/security/cve/CVE-2024-7207 https://bugzilla.redhat.com/show_bug.cgi?id=2300352 https://github.com/envoyproxy/envoy/security/advisories/GHSA-ffhv-fvxq-r6mf
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}`