class="post-card tf-filter-item" href=/v1.16/zh/news/security/istio-security-2020-002/ data-category=security-bulletins><div class=post-date><p>Feb 11, 2020</p></div><div><h4 class=post-title>ISTIO-SECURITY-2020-002</h4><div class=post-summary><p>由于不正确地接受某些请求 header 导致 Mixer 策略检查被绕过。</p><div><strong>CVE(s)</strong>: CVE-2020-8843</div><div><strong>CVSS</strong>: 7.4</div><strong>Affected versions</strong>: 1.3 to 1.3.6</div><p class=post-author>安全公告</p></d