Lucene search
Veracode Vulnerability DatabaseVERACODE:22599HistoryFeb 28, 2020 - 7:40 a.m.
Cross-Site Request Forgery (CSRF)
2020-02-2807:40:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
31.5%
cloud foundry uaa is vulnerable to cross-site request forgery (CSRF). The vulnerability exists as the OAuth2 state parameter is not being validated in the callback function when authenticating with external identity providers.
Related
cvelist
cvelist
cloudfoundry
cloudfoundry
prion
prion
Design/Logic Flaw
2020-02-27 20:15:00
osv
osv
CVE-2020-5402
2020-02-27 20:15:11
cve
cve
CVE-2020-5402
2020-02-27 20:15:11
nvd
nvd
CVE-2020-5402
2020-02-27 20:15:11