{"action":"Upgrade github.com/concourse/concourse to 5.2.8 or later.","affected":[{"fixed":"5.2.8","introduced":"0"},{"fixed":"5.5.10","introduced":"5.3.0"},{"fixed":"5.8.1","introduced":"5.6.0"}],"component":"github.com/concourse/concourse","cve_ids":["CVE-2018-15798"],"ecosystem":"Go","epss":0.01145,"exploited":false,"fixed_versions":["5.2.8","5.5.10","5.8.1"],"ghsa_id":"GHSA-9689-rx4v-cqgc","id":"tcs_01M5KF51JFKN4MPGXF9HQ3YQVT","modified_at":"2023-11-08T03:59:58.353225Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-9689-rx4v-cqgc","https://nvd.nist.gov/vuln/detail/CVE-2018-15798","https://github.com/concourse/concourse/pull/5350/commits/38cb4cc025e5ed28764b4adc363a0bbf41f3c7cb","https://github.com/concourse/concourse/blob/release/5.2.x/release-notes/v5.2.8.md","https://pivotal.io/security/cve-2018-15798"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-9689-rx4v-cqgc","url":"https://osv.dev/vulnerability/GHSA-9689-rx4v-cqgc"}],"summary":"Pivotal Concourse Open Redirect in Login Flow"}