Lucene search
Veracode Vulnerability DatabaseVERACODE:13696HistoryApr 26, 2019 - 2:20 a.m.
Open Redirection
2019-04-2602:20:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
35.8%
Cloudfoundry UAA is vulnerable to open redirection.The redirect URI is not properly validated to filter wildcard characters, allowing a remote unauthenticated user to enter malicious URI to get a UAA access code.
Related
cve
cve
CVE-2019-3788
2019-04-25 21:29:00
prion
prion
Code injection
2019-04-25 21:29:00
cvelist
cvelist
CVE-2019-3788 UAA redirect-uri allows wildcard in the subdomain
2019-04-15 00:00:00
cloudfoundry
cloudfoundry
nvd
nvd
CVE-2019-3788
2019-04-25 21:29:00
osv
osv
CVE-2019-3788
2019-04-25 21:29:00