{
  "cveId": "CVE-2024-45808",
  "url": "https://patchblox.com/security/cve/CVE-2024-45808",
  "summary": "CVE-2024-45808 is fixed in ecs-service-connect-agent on 1 platform by ALAS2023-2026-1603 (version v1.29.9.0-1.amzn2023), released April 27, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ecs-service-connect-agent: Envoy is a cloud-native high-performance edge/middle/service proxy",
  "description": "Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject unexpected content into access logs. This is achieved by exploiting the lack of validation for the \u0060REQUESTED_SERVER_NAME\u0060 field for access loggers. This issue has been addressed in versions 1.31.2, 1.30.6, 1.29.9, and 1.28.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.",
  "published": "2026-04-27T09:00:00Z",
  "severity": "moderate",
  "epss": 0.00351,
  "epssPercentile": 0.29084,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ecs-service-connect-agent",
      "release": "amzn 2023",
      "fixedVersion": "v1.29.9.0-1.amzn2023",
      "fix": "ALAS2023-2026-1603",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1603",
      "released": "2026-04-27T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}