| Package | Affected versions | Patched versions |
|---|---|---|
| cf-release | < 216 | 216 |
| cloud foundry elastic runtime | < 1.7.0 | 1.7.0 |
| cloud foundry uaa | < 2.5.2 | 2.5.2 |
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free