Open Redirect Vulnerability in Cloud Foundry UAA

CVE-2018-11041

What is CVE-2018-11041?

Cloud Foundry UAA has a vulnerability that allows for open redirects due to insufficient validation of redirect URL parameters on the login page. This flaw can be exploited by a remote attacker to create a malicious link that redirects users to unintended external sites following successful login attempts. Exploiting this vulnerability can potentially compromise the security of user sessions and lead to phishing attacks or other malicious activities.

References