{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 4.7.5 (4.7.x), 4.10.1 (4.10.x), 4.12.3 (4.12.x) or 4.19.0 (4.19.x) or later.","affected":[{"fixed":"4.7.5","introduced":"0"},{"fixed":"4.10.1","introduced":"4.8.0"},{"fixed":"4.12.3","introduced":"4.11.0"},{"fixed":"4.19.0","introduced":"4.13.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2018-11041"],"ecosystem":"Maven","epss":0.00837,"exploited":false,"fixed_versions":["4.7.5","4.10.1","4.12.3","4.19.0"],"ghsa_id":"GHSA-xh4m-99qp-w483","id":"tcs_01M5N9JBZZ5E3SQ51M59T826SB","modified_at":"2024-03-01T23:56:40.495696Z","published_at":"2022-05-14T03:05:26Z","references":["https://osv.dev/vulnerability/GHSA-xh4m-99qp-w483","https://nvd.nist.gov/vuln/detail/CVE-2018-11041","https://github.com/cloudfoundry/uaa/commit/238ce572fdaebbb8357b265d2f77eb9761199a09","https://github.com/cloudfoundry/uaa/commit/57a15dfb7e0e3a59019ebe951793b586512b196","https://github.com/cloudfoundry/uaa/commit/7a8f157f7e2feed2d0ebb63b163ff735b6340b9","https://github.com/cloudfoundry/uaa/commit/7d750e036cd52c5d30e73e28cbcae23126d7154","https://github.com/cloudfoundry/uaa/commit/83c8627c2da7845043b65e6ba354a64b4f9c6e2f","https://github.com/cloudfoundry/uaa/commit/8a599448781acd481aa9dab1b0bde3424e00ced","https://github.com/cloudfoundry/uaa/commit/d17b23fc3bf9b86f111774925afadfced75315c","https://github.com/cloudfoundry/uaa/commit/f6362a8f1865314aa507fc5de772848b7e55236","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/blog/cve-2018-11041"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xh4m-99qp-w483","url":"https://osv.dev/vulnerability/GHSA-xh4m-99qp-w483"}],"summary":"Cloud Foundry UAA open redirect"}