| Package | Affected versions | Patched versions |
|---|---|---|
| cf-release | ≤ 209 | |
| cloud foundry elastic runtime | ≤ 1.4.5 | |
| cloud foundry uaa | ≤ 2.2.6 |
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free