https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T21:20:29.866270+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-11278 CVE-2019-11278 — Privilege Escalation via Blind SCIM Injection in UAA 2026-10-19T21:20:29.867494+00:00

Affected: Cloud Foundry UAA Release (OSS)

CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft a SCIM query, which leaks information that allows an escalation of privileges, ultimately allowing the malicious user to gain control of UAA scopes they should not have.