Medium
Security advisory
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-0713
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:01 UTC · Revision 1
Source evidence
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
osv:CVE-2016-0713
Complete source record
{
"id": "d90349b6314c6d9b9b9f39c02f45718e0834c25dcbdd1bdf91ce4681d90eefd4",
"url": "https://osv.dev/vulnerability/CVE-2016-0713",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-0713",
"summary": "Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.",
"evidence": "osv:CVE-2016-0713",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2016-0713",
"aliases": [
"CVE-2016-0713"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry-attic/cf-release",
"type": "GIT",
"events": [
{
"introduced": "77fbfd29487448f680b2b630953547c75fe4f0cc"
},
{
"last_affected": "a7ead1d4e639153828a5add54ca16a0b45c9e22b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:141:*:*:*:*:*:*:*",
"range": [
{
"introduced": "141"
},
{
"last_affected": "141"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:142:*:*:*:*:*:*:*",
"range": [
{
"introduced": "142"
},
{
"last_affected": "142"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:143:*:*:*:*:*:*:*",
"range": [
{
"introduced": "143"
},
{
"last_affected": "143"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:144:*:*:*:*:*:*:*",
"range": [
{
"introduced": "144"
},
{
"last_affected": "144"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:145:*:*:*:*:*:*:*",
"range": [
{
"introduced": "145"
},
{
"last_affected": "145"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:146:*:*:*:*:*:*:*",
"range": [
{
"introduced": "146"
},
{
"last_affected": "146"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:147:*:*:*:*:*:*:*",
"range": [
{
"introduced": "147"
},
{
"last_affected": "147"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:148:*:*:*:*:*:*:*",
"range": [
{
"introduced": "148"
},
{
"last_affected": "148"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:149:*:*:*:*:*:*:*",
"range": [
{
"introduced": "149"
},
{
"last_affected": "149"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:150:*:*:*:*:*:*:*",
"range": [
{
"introduced": "150"
},
{
"last_affected": "150"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:151:*:*:*:*:*:*:*",
"range": [
{
"introduced": "151"
},
{
"last_affected": "151"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:152:*:*:*:*:*:*:*",
"range": [
{
"introduced": "152"
},
{
"last_affected": "152"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:153:*:*:*:*:*:*:*",
"range": [
{
"introduced": "153"
},
{
"last_affected": "153"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:154:*:*:*:*:*:*:*",
"range": [
{
"introduced": "154"
},
{
"last_affected": "154"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:155:*:*:*:*:*:*:*",
"range": [
{
"introduced": "155"
},
{
"last_affected": "155"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:156:*:*:*:*:*:*:*",
"range": [
{
"introduced": "156"
},
{
"last_affected": "156"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:157:*:*:*:*:*:*:*",
"range": [
{
"introduced": "157"
},
{
"last_affected": "157"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:158:*:*:*:*:*:*:*",
"range": [
{
"introduced": "158"
},
{
"last_affected": "158"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:159:*:*:*:*:*:*:*",
"range": [
{
"introduced": "159"
},
{
"last_affected": "159"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:160:*:*:*:*:*:*:*",
"range": [
{
"introduced": "160"
},
{
"last_affected": "160"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:161:*:*:*:*:*:*:*",
"range": [
{
"introduced": "161"
},
{
"last_affected": "161"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:162:*:*:*:*:*:*:*",
"range": [
{
"introduced": "162"
},
{
"last_affected": "162"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:163:*:*:*:*:*:*:*",
"range": [
{
"introduced": "163"
},
{
"last_affected": "163"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:164:*:*:*:*:*:*:*",
"range": [
{
"introduced": "164"
},
{
"last_affected": "164"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:165:*:*:*:*:*:*:*",
"range": [
{
"introduced": "165"
},
{
"last_affected": "165"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:166:*:*:*:*:*:*:*",
"range": [
{
"introduced": "166"
},
{
"last_affected": "166"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:168:*:*:*:*:*:*:*",
"range": [
{
"introduced": "168"
},
{
"last_affected": "168"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:169:*:*:*:*:*:*:*",
"range": [
{
"introduced": "169"
},
{
"last_affected": "169"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:170:*:*:*:*:*:*:*",
"range": [
{
"introduced": "170"
},
{
"last_affected": "170"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:171:*:*:*:*:*:*:*",
"range": [
{
"introduced": "171"
},
{
"last_affected": "171"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:172:*:*:*:*:*:*:*",
"range": [
{
"introduced": "172"
},
{
"last_affected": "172"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:173:*:*:*:*:*:*:*",
"range": [
{
"introduced": "173"
},
{
"last_affected": "173"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:175:*:*:*:*:*:*:*",
"range": [
{
"introduced": "175"
},
{
"last_affected": "175"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:176:*:*:*:*:*:*:*",
"range": [
{
"introduced": "176"
},
{
"last_affected": "176"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:177:*:*:*:*:*:*:*",
"range": [
{
"introduced": "177"
},
{
"last_affected": "177"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:178:*:*:*:*:*:*:*",
"range": [
{
"introduced": "178"
},
{
"last_affected": "178"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:179:*:*:*:*:*:*:*",
"range": [
{
"introduced": "179"
},
{
"last_affected": "179"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:180:*:*:*:*:*:*:*",
"range": [
{
"introduced": "180"
},
{
"last_affected": "180"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:182:*:*:*:*:*:*:*",
"range": [
{
"introduced": "182"
},
{
"last_affected": "182"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:183:*:*:*:*:*:*:*",
"range": [
{
"introduced": "183"
},
{
"last_affected": "183"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:186:*:*:*:*:*:*:*",
"range": [
{
"introduced": "186"
},
{
"last_affected": "186"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:187:*:*:*:*:*:*:*",
"range": [
{
"introduced": "187"
},
{
"last_affected": "187"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:188:*:*:*:*:*:*:*",
"range": [
{
"introduced": "188"
},
{
"last_affected": "188"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:189:*:*:*:*:*:*:*",
"range": [
{
"introduced": "189"
},
{
"last_affected": "189"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:190:*:*:*:*:*:*:*",
"range": [
{
"introduced": "190"
},
{
"last_affected": "190"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:191:*:*:*:*:*:*:*",
"range": [
{
"introduced": "191"
},
{
"last_affected": "191"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:192:*:*:*:*:*:*:*",
"range": [
{
"introduced": "192"
},
{
"last_affected": "192"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:193:*:*:*:*:*:*:*",
"range": [
{
"introduced": "193"
},
{
"last_affected": "193"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:194:*:*:*:*:*:*:*",
"range": [
{
"introduced": "194"
},
{
"last_affected": "194"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:195:*:*:*:*:*:*:*",
"range": [
{
"introduced": "195"
},
{
"last_affected": "195"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:196:*:*:*:*:*:*:*",
"range": [
{
"introduced": "196"
},
{
"last_affected": "196"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:197:*:*:*:*:*:*:*",
"range": [
{
"introduced": "197"
},
{
"last_affected": "197"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:198:*:*:*:*:*:*:*",
"range": [
{
"introduced": "198"
},
{
"last_affected": "198"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:199:*:*:*:*:*:*:*",
"range": [
{
"introduced": "199"
},
{
"last_affected": "199"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:200:*:*:*:*:*:*:*",
"range": [
{
"introduced": "200"
},
{
"last_affected": "200"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:201:*:*:*:*:*:*:*",
"range": [
{
"introduced": "201"
},
{
"last_affected": "201"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:202:*:*:*:*:*:*:*",
"range": [
{
"introduced": "202"
},
{
"last_affected": "202"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:203:*:*:*:*:*:*:*",
"range": [
{
"introduced": "203"
},
{
"last_affected": "203"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:204:*:*:*:*:*:*:*",
"range": [
{
"introduced": "204"
},
{
"last_affected": "204"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:205:*:*:*:*:*:*:*",
"range": [
{
"introduced": "205"
},
{
"last_affected": "205"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:206:*:*:*:*:*:*:*",
"range": [
{
"introduced": "206"
},
{
"last_affected": "206"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*",
"range": [
{
"introduced": "207"
},
{
"last_affected": "207"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:208:*:*:*:*:*:*:*",
"range": [
{
"introduced": "208"
},
{
"last_affected": "208"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:209:*:*:*:*:*:*:*",
"range": [
{
"introduced": "209"
},
{
"last_affected": "209"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:210:*:*:*:*:*:*:*",
"range": [
{
"introduced": "210"
},
{
"last_affected": "210"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:211:*:*:*:*:*:*:*",
"range": [
{
"introduced": "211"
},
{
"last_affected": "211"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:212:*:*:*:*:*:*:*",
"range": [
{
"introduced": "212"
},
{
"last_affected": "212"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:213:*:*:*:*:*:*:*",
"range": [
{
"introduced": "213"
},
{
"last_affected": "213"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:214:*:*:*:*:*:*:*",
"range": [
{
"introduced": "214"
},
{
"last_affected": "214"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:215:*:*:*:*:*:*:*",
"range": [
{
"introduced": "215"
},
{
"last_affected": "215"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:217:*:*:*:*:*:*:*",
"range": [
{
"introduced": "217"
},
{
"last_affected": "217"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:218:*:*:*:*:*:*:*",
"range": [
{
"introduced": "218"
},
{
"last_affected": "218"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:219:*:*:*:*:*:*:*",
"range": [
{
"introduced": "219"
},
{
"last_affected": "219"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:220:*:*:*:*:*:*:*",
"range": [
{
"introduced": "220"
},
{
"last_affected": "220"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:221:*:*:*:*:*:*:*",
"range": [
{
"introduced": "221"
},
{
"last_affected": "221"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:222:*:*:*:*:*:*:*",
"range": [
{
"introduced": "222"
},
{
"last_affected": "222"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:223:*:*:*:*:*:*:*",
"range": [
{
"introduced": "223"
},
{
"last_affected": "223"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:224:*:*:*:*:*:*:*",
"range": [
{
"introduced": "224"
},
{
"last_affected": "224"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:225:*:*:*:*:*:*:*",
"range": [
{
"introduced": "225"
},
{
"last_affected": "225"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:226:*:*:*:*:*:*:*",
"range": [
{
"introduced": "226"
},
{
"last_affected": "226"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:227:*:*:*:*:*:*:*",
"range": [
{
"introduced": "227"
},
{
"last_affected": "227"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:228:*:*:*:*:*:*:*",
"range": [
{
"introduced": "228"
},
{
"last_affected": "228"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"141",
"142",
"143",
"144",
"145",
"146",
"147",
"148",
"149",
"150",
"151",
"152",
"153",
"154",
"155",
"156",
"157",
"158",
"159",
"160",
"161",
"162",
"163",
"164",
"165",
"166",
"168",
"169",
"170",
"171",
"172",
"173",
"175",
"176",
"177",
"178",
"179",
"180",
"182",
"183",
"186",
"187",
"188",
"189",
"190",
"191",
"192",
"193",
"194",
"195",
"196",
"197",
"198",
"199",
"200",
"201",
"202",
"203",
"204",
"205",
"206",
"207",
"208",
"209",
"210",
"211",
"212",
"213",
"214",
"215",
"217",
"218",
"219",
"220",
"221",
"222",
"223",
"224",
"225",
"226",
"227",
"228"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0713.json"
}
}
],
"modified": "2026-10-24T10:30:34.337324208Z",
"provider": "osv",
"references": [
"https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/",
"https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:cloudfoundry:cf-release:167:*:*:*:*:*:*:*",
"cpe:2.3:a:cloudfoundry:cf-release:174:*:*:*:*:*:*:*",
"cpe:2.3:a:cloudfoundry:cf-release:181:*:*:*:*:*:*:*",
"cpe:2.3:a:cloudfoundry:cf-release:184:*:*:*:*:*:*:*",
"cpe:2.3:a:cloudfoundry:cf-release:185:*:*:*:*:*:*:*",
"cpe:2.3:a:cloudfoundry:cf-release:216:*:*:*:*:*:*:*"
],
"vendor_product": "cloudfoundry:cf-release",
"extracted_events": [
{
"range": [
{
"introduced": "167"
},
{
"last_affected": "167"
},
{
"introduced": "174"
},
{
"last_affected": "174"
},
{
"introduced": "181"
},
{
"last_affected": "181"
},
{
"introduced": "184"
},
{
"last_affected": "184"
},
{
"introduced": "185"
},
{
"last_affected": "185"
},
{
"introduced": "216"
},
{
"last_affected": "216"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-0713",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 433493,
"published_at": "2017-08-31T14:29:00.197+00:00"
}