Concourse Open Redirect in the /sky/login endpoint

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)

N/A

指向未可信站点的URL重定向(开放重定向)

Pivotal Software Concourse 输入验证错误漏洞

Pivotal Software Concourse是美国Pivotal Software公司的一套用于持续开发的软件交付控制系统。 Pivotal Software Concourse中存在安全漏洞。远程攻击者可借助特制链接或网站利用该漏洞将用户重定向到不可信的网站，获取用户访问令牌。以下产品及版本受到影响：Pivotal Software Concourse 6.0.0之前版本，5.2.8之前版本，5.3.x所有版本，5.4.x所有版本，5.5.10之前的5.5.x版本，5.6.x所有版本，5.7.x

N/A

N/A