CVE-2017-8048

In Cloud Foundry, CVE-2017-8048 is a regression introduced by the original fix for CVE-2017-8033. Affected are capi-release 1.33.0–1.41.x (prior to 1.42.0) and cf-release 268–273 (prior to 274). The issue enables a space developer to execute arbitrary code on the Cloud Controller VM by pushing a ...

CVE-2017-8047

CVE-2017-8047 affects Cloud Foundry routing-release (all versions prior to v0.163.0) and cf-release (all versions prior to v274). A URL-append.open redirect vulnerability enables phishing by letting attackers redirect users to unintended destinations, potentially harvesting credentials. The issue...