CVE-2017-8047

In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to…

published October 3, 2017

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00780 · 55.2th percentile
Published
2017-10-03T07:00Z
EPSS history
Timeline
  • 03 OCT 07:00Z
    In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to…
    cvelistv5