Description
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cloudfoundry Foundation | UAA | 77.30.0 – ≤ v78.7.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.cloudfoundry.identity:cloudfoundry-identity-server | >= 77.30.0, < 78.8.0 | 78.8.0 | GHSA-6wcw-r64p-qrrw |