GHSA-qf8p-gpw6-r52g
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a wildcard in the redirect uri's subdomain, a remote malicious unauthenticated user can craft a phishing link to get a UAA access code from the victim.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 5, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.