Skip to content
OpenAdvisories

Product · Pivotal

Concourse

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2020-5409

    Concourse Open Redirect in the /sky/login endpoint

    Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to th…

    Pivotal Concourse
  • High 7.6
    CVE-2018-15798

    Pivotal Concourse allows malicious redirect urls on login

    Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to th…

    Pivotal Concourse github.com/concourse/concourse Go