Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:04:52 +0000 CVE-2019-3788 — UAA redirect-uri allows wildcard in the subdomain https://cve.radiocsirt.org/vuln/cve-2019-3788 <p><strong>Affected:</strong> Cloud Foundry UAA Release (OSS), Pivotal Application Service</p> <p>Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a wildcard in the redirect uri&#39;s subdomain, a remote malicious unauthenticated user can craft a phishing link to get a UAA access code from the victim.</p> <p><strong>Affected:</strong> Cloud Foundry UAA Release (OSS), Pivotal Application Service</p> <p>Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a wildcard in the redirect uri&#39;s subdomain, a remote malicious unauthenticated user can craft a phishing link to get a UAA access code from the victim.</p> https://cve.radiocsirt.org/vuln/cve-2019-3788