high8.8
CVE-2020-5402
In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when …
Impact
In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity providers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Cf-Deployment | before 12.33.0 |
| Cloudfoundry | User Account And Authentication | before 74.14.0 |