{"id":"CVE-2016-0713","details":"Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.","modified":"2026-08-27T03:45:04.291483281Z","published":"2017-08-31T14:29:00.197Z","database_specific":{"unresolved_ranges":[{"vendor_product":"cloudfoundry:cf-release","cpes":["cpe:2.3:a:cloudfoundry:cf-release:167:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:174:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:181:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:184:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:185:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:216:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"167"},{"last_affected":"167"},{"introduced":"174"},{"last_affected":"174"},{"introduced":"181"},{"last_affected":"181"},{"introduced":"184"},{"last_affected":"184"},{"introduced":"185"},{"last_affected":"185"},{"introduced":"216"},{"last_affected":"216"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/"},{"type":"ADVISORY","url":"https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry-attic/cf-release","events":[{"introduced":"77fbfd29487448f680b2b630953547c75fe4f0cc"},{"last_affected":"a7ead1d4e639153828a5add54ca16a0b45c9e22b"}],"database_specific":{"cpe":["cpe:2.3:a:cloudfoundry:cf-release:141:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:142:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:143:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:144:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:145:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:146:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:147:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:148:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:149:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:150:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:151:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:152:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:153:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:154:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:155:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:156:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:157:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:158:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:159:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:160:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:161:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:162:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:163:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:164:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:165:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:166:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:168:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:169:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:170:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:171:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:172:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:173:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:175:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:176:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:177:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:178:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:179:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:180:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:182:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:183:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:186:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:187:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:188:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:189:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:190:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:191:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:192:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:193:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:194:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:195:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:196:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:197:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:198:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:199:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:200:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:201:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:202:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:203:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:204:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:205:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:206:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:208:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:209:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:210:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:211:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:212:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:213:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:214:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:215:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:217:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:218:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:219:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:220:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:221:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:222:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:223:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:224:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:225:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:226:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:227:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:228:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"141"},{"last_affected":"141"},{"introduced":"142"},{"last_affected":"142"},{"introduced":"143"},{"last_affected":"143"},{"introduced":"144"},{"last_affected":"144"},{"introduced":"145"},{"last_affected":"145"},{"introduced":"146"},{"last_affected":"146"},{"introduced":"147"},{"last_affected":"147"},{"introduced":"148"},{"last_affected":"148"},{"introduced":"149"},{"last_affected":"149"},{"introduced":"150"},{"last_affected":"150"},{"introduced":"151"},{"last_affected":"151"},{"introduced":"152"},{"last_affected":"152"},{"introduced":"153"},{"last_affected":"153"},{"introduced":"154"},{"last_affected":"154"},{"introduced":"155"},{"last_affected":"155"},{"introduced":"156"},{"last_affected":"156"},{"introduced":"157"},{"last_affected":"157"},{"introduced":"158"},{"last_affected":"158"},{"introduced":"159"},{"last_affected":"159"},{"introduced":"160"},{"last_affected":"160"},{"introduced":"161"},{"last_affected":"161"},{"introduced":"162"},{"last_affected":"162"},{"introduced":"163"},{"last_affected":"163"},{"introduced":"164"},{"last_affected":"164"},{"introduced":"165"},{"last_affected":"165"},{"introduced":"166"},{"last_affected":"166"},{"introduced":"168"},{"last_affected":"168"},{"introduced":"169"},{"last_affected":"169"},{"introduced":"170"},{"last_affected":"170"},{"introduced":"171"},{"last_affected":"171"},{"introduced":"172"},{"last_affected":"172"},{"introduced":"173"},{"last_affected":"173"},{"introduced":"175"},{"last_affected":"175"},{"introduced":"176"},{"last_affected":"176"},{"introduced":"177"},{"last_affected":"177"},{"introduced":"178"},{"last_affected":"178"},{"introduced":"179"},{"last_affected":"179"},{"introduced":"180"},{"last_affected":"180"},{"introduced":"182"},{"last_affected":"182"},{"introduced":"183"},{"last_affected":"183"},{"introduced":"186"},{"last_affected":"186"},{"introduced":"187"},{"last_affected":"187"},{"introduced":"188"},{"last_affected":"188"},{"introduced":"189"},{"last_affected":"189"},{"introduced":"190"},{"last_affected":"190"},{"introduced":"191"},{"last_affected":"191"},{"introduced":"192"},{"last_affected":"192"},{"introduced":"193"},{"last_affected":"193"},{"introduced":"194"},{"last_affected":"194"},{"introduced":"195"},{"last_affected":"195"},{"introduced":"196"},{"last_affected":"196"},{"introduced":"197"},{"last_affected":"197"},{"introduced":"198"},{"last_affected":"198"},{"introduced":"199"},{"last_affected":"199"},{"introduced":"200"},{"last_affected":"200"},{"introduced":"201"},{"last_affected":"201"},{"introduced":"202"},{"last_affected":"202"},{"introduced":"203"},{"last_affected":"203"},{"introduced":"204"},{"last_affected":"204"},{"introduced":"205"},{"last_affected":"205"},{"introduced":"206"},{"last_affected":"206"},{"introduced":"207"},{"last_affected":"207"},{"introduced":"208"},{"last_affected":"208"},{"introduced":"209"},{"last_affected":"209"},{"introduced":"210"},{"last_affected":"210"},{"introduced":"211"},{"last_affected":"211"},{"introduced":"212"},{"last_affected":"212"},{"introduced":"213"},{"last_affected":"213"},{"introduced":"214"},{"last_affected":"214"},{"introduced":"215"},{"last_affected":"215"},{"introduced":"217"},{"last_affected":"217"},{"introduced":"218"},{"last_affected":"218"},{"introduced":"219"},{"last_affected":"219"},{"introduced":"220"},{"last_affected":"220"},{"introduced":"221"},{"last_affected":"221"},{"introduced":"222"},{"last_affected":"222"},{"introduced":"223"},{"last_affected":"223"},{"introduced":"224"},{"last_affected":"224"},{"introduced":"225"},{"last_affected":"225"},{"introduced":"226"},{"last_affected":"226"},{"introduced":"227"},{"last_affected":"227"},{"introduced":"228"},{"last_affected":"228"}],"source":"CPE_STRING"}}],"versions":["141","142","143","144","145","146","147","148","149","150","151","152","153","154","155","156","157","158","159","160","161","162","163","164","165","166","168","169","170","171","172","173","175","176","177","178","179","180","182","183","186","187","188","189","190","191","192","193","194","195","196","197","198","199","200","201","202","203","204","205","206","207","208","209","210","211","212","213","214","215","217","218","219","220","221","222","223","224","225","226","227","228"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0713.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}