Количество 2
Количество 2
CVE-2018-15798
Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.
GHSA-9689-rx4v-cqgc
Pivotal Concourse Open Redirect in Login Flow
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-15798 Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. | CVSS3: 7.6 | 1% Низкий | около 7 лет назад |
| GHSA-9689-rx4v-cqgc Pivotal Concourse Open Redirect in Login Flow | CVSS3: 5.4 | 1% Низкий | почти 4 года назад |
Уязвимостей на страницу