Skip to content
OpenAdvisories

Package · Go

github.com/concourse/concourse

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2018-15798

    Pivotal Concourse allows malicious redirect urls on login

    Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to th…

    Pivotal Concourse github.com/concourse/concourse Go