Cloud Foundry CAPI (Cloud Controller API) Schwachstellen (CVE)

Broken access control restriction in Cloud Controller API

The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3/staging/:guid/droplet…