CVE-2021-39156 log

Severity High
Remote Yes
Type Access restriction bypass
Istio before version 1.11.1 contains a remotely exploitable vulnerability where an HTTP request with #fragment in the path may bypass Istio's URI path based authorization policies.

For instance, an Istio authorization policy denies requests sent to the URI path /user/profile. In the vulnerable versions, a request with URI path /user/profile#section1 bypasses the deny policy and routes to the backend (with the normalized URI path /user/profile%23section1), possibly leading to a security incident.
Group Package Affected Fixed Severity Status Ticket
AVG-2321 istio 1.11.0-1 1.11.1-1 High Fixed