https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:29:51.527865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-3785 CVE-2019-3785 — Cloud Controller provides signed URL with write authorization to read only user 2026-10-08T19:29:51.528912+00:00

Affected: Cloud Foundry CAPI

Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read permissions can request package information and receive a signed bit-service url that grants the user write permissions to the bit-service.