https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:09:39 +0000 https://cve.radiocsirt.org/vuln/bit-concourse-2020-5409 <p><strong>Affected:</strong> Bitnami: concourse</p> <p>Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user&#39;s access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)</p> <p><strong>Affected:</strong> Bitnami: concourse</p> <p>Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user&#39;s access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)</p> https://cve.radiocsirt.org/vuln/bit-concourse-2020-5409 https://cve.radiocsirt.org/vuln/cnvd-2020-41541 cnvd-2020-41541 https://cve.radiocsirt.org/vuln/cnvd-2020-41541 https://cve.radiocsirt.org/vuln/euvd-2026-182615 EUVD-2026-182615 https://cve.radiocsirt.org/vuln/euvd-2026-182615 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5409 <p>Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user&#39;s access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)</p> <p>Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user&#39;s access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5409 https://cve.radiocsirt.org/vuln/gsd-2020-5409 gsd-2020-5409 https://cve.radiocsirt.org/vuln/gsd-2020-5409