https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:50:15.192347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-concourse-2020-5409 BIT-concourse-2020-5409 — Concourse Open Redirect in the /sky/login endpoint 2026-10-03T11:50:15.197403+00:00

Affected: Bitnami: concourse

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)

 https://cve.radiocsirt.org/vuln/cnvd-2020-41541 cnvd-2020-41541 2026-10-03T11:50:15.197456+00:00 cnvd-2020-41541 https://cve.radiocsirt.org/vuln/euvd-2026-182615 EUVD-2026-182615 2026-10-03T11:50:15.197474+00:00 EUVD-2026-182615 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5409 fkie_cve-2020-5409 2026-10-03T11:50:15.197486+00:00

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)

 https://cve.radiocsirt.org/vuln/gsd-2020-5409 gsd-2020-5409 2026-10-03T11:50:15.197508+00:00 gsd-2020-5409