CVE-2018-15798
1 advisory.
Go/github.com/concourse/concourse CVE-2018-15798: medium 5.4, EPSS 1.15%
Pivotal Concourse Open Redirect in Login Flow
Action: Upgrade github.com/concourse/concourse to 5.2.8 or later.
go get github.com/concourse/concourse@v5.2.8go get github.com/concourse/concourse@v5.5.10go get github.com/concourse/concourse@v5.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.8 | - |
| 5.3.0 | 5.5.10 | - |
| 5.6.0 | 5.8.1 | - |
Fixed versions
| 5.2.8 | 5.5.10 | 5.8.1 |
Sources
- osv: GHSA-9689-rx4v-cqgc
- https://nvd.nist.gov/vuln/detail/CVE-2018-15798
- https://github.com/concourse/concourse/pull/5350/commits/38cb4cc025e5ed28764b4adc363a0bbf41f3c7cb
- https://github.com/concourse/concourse/blob/release/5.2.x/release-notes/v5.2.8.md
- https://pivotal.io/security/cve-2018-15798
CVE-2018-15798 · published · modified · JSON