| Package | Affected versions | Patched versions |
|---|---|---|
| cf-deployment | < 16.20.0 | 16.20.0 |
| user account and authentication | < 75.5.0 | 75.5.0 |
UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free