PT-2025-9996 · Unknown · Envoy Gateway+1

Denniskniep · Publicado 2025-03-06 · Atualizado 2025-09-09 · CVE-2025-25294

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Envoy Gateway versions prior to 1.2.7 Envoy Gateway versions prior to 1.3.1

Description The issue concerns a default Envoy Proxy access log configuration that is vulnerable to log injection attacks. An attacker can use a specially crafted user-agent to perform JSON injection, allowing them to add and overwrite fields in the access log.

Recommendations For versions prior to 1.2.7, update to version 1.2.7 to resolve the issue. For versions prior to 1.3.1, update to version 1.3.1 to resolve the issue. As a temporary workaround, consider modifying the EnvoyProxy.spec.telemetry.accessLog setting to use a JSON formatter instead of the old text-based default format.

Exploit

Correção

Enumeração de Fraquezas

CWE-117

Identificadores relacionados

BIT-ENVOY-GATEWAY-2025-25294

CVE-2025-25294

GHSA-MF24-CHXH-HMVJ

GO-2025-3504

OPENSUSE-SU-2025:14889-1

Produtos afetados

Envoy Gateway

Envoyproxy

Referências · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25294.json · Exploit
• https://github.com/envoyproxy/gateway · Nota
• https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj · Nota
• https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a · Correção
• https://github.com/envoyproxy/gateway/releases/tag/v1.2.7 · Nota
• https://github.com/envoyproxy/gateway/commit/358bed50dcb7b32f39a2edb252fb1399c7fc65dc · Nota
• https://github.com/envoyproxy/gateway/commit/041d474a70d5921e5d65e6e14ea60e14dac70b01 · Nota
• https://github.com/envoyproxy/gateway/releases/tag/v1.3.1 · Nota
• https://suse.com/security/cve/CVE-2025-24526 · Nota
• https://osv.dev/vulnerability/CVE-2025-25294 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-23387 · Nota
• https://osv.dev/vulnerability/BIT-envoy-gateway-2025-25294 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-27507 · Nota
• https://suse.com/security/cve/CVE-2025-25294 · Nota
• https://suse.com/security/cve/CVE-2025-27144 · Nota