pivotal Concourse Vulnerabilities

Pivotal Concourse vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

19 December 2022

Authorization Bypass Vulnerability in Concourse by Concourse CI
CVE-2022-31683
Pivotal SoftwareConcourse5.4MEDIUM

14 May 2020

Concourse Open Redirect in the /sky/login endpoint
CVE-2020-5409
PivotalConcourse7.6HIGH

1 April 2019

Concourse 5.0.0 SQL Injection vulnerability
CVE-2019-3792
PivotalConcourse6.8MEDIUM

12 January 2019

Concourse includes token in CLI authentication callback
CVE-2019-3803
PivotalConcourse4.5MEDIUM

19 December 2018

Pivotal Concourse allows malicious redirect urls on login
CVE-2018-15798
PivotalConcourse7.6HIGH

13 March 2018

Remote Code Execution Risk in Pivotal Concourse CI Software
CVE-2018-1227
Pivotal SoftwareConcourse Ci: As Of 20...7.5HIGH