{"id":"CVE-2018-11041","details":"Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open redirects. A remote attacker can craft a malicious link that, when clicked, will redirect users to arbitrary websites after a successful login attempt.","aliases":["GHSA-xh4m-99qp-w483"],"modified":"2026-07-08T05:50:46.152833011Z","published":"2018-06-25T15:29:00.410Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"4.7.5"},{"fixed":"4.7.5"}],"source":"CPE_RANGE","vendor_product":"pivotal_software:cloud_foundry_uaa"}]},"references":[{"type":"ADVISORY","url":"https://www.cloudfoundry.org/blog/cve-2018-11041/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/uaa","events":[{"introduced":"0"},{"fixed":"857c4931c44523984d08d7e83187e98a0aa5d13d"},{"fixed":"d5dfe4b5e55b85fb7876850e70f0f5e0d41d1dff"},{"fixed":"78971006ec1bb7a4831d4ec64c8988883903dd95"}],"database_specific":{"cpe":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.7.5"},{"fixed":"4.10.1"},{"fixed":"4.19.0"}],"source":"CPE_RANGE"}}],"versions":["4.18.0","4.17.0","4.16.0","releases/4.15.0","4.15.0","4.12.0","4.11.0","4.10.0","4.9.0","4.7.3","4.7.1","4.7.0","4.6.1","4.6.0","4.5.0","4.4.0","4.3.0","4.2.0","4.1.0","3.16.0","4.0.0","3.15.0","3.14.0","3.13.0","3.12.0","3.11.0","3.10.0","3.9.3","3.9.2","3.9.1","3.9.0","3.8.0","travis-success-1497","travis-success-1478","travis-success-1475","1.8.0","1.6.2","1.6.1","1.5.4.1","1.5.4","1.5.3","1.5.2.1","1.5.2","1.5.0","1.4.7","1.4.6","1.4.5","1.4.3","1.4.2","1.4.1","1.4.0","1.2.6","1.2.0","1.1.2","1.1.1","1.1","1.0.3","1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11041.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/uaa-release","events":[{"introduced":"0"},{"fixed":"d3bf7051e59cde104ae90775d56bd7964ea4231c"},{"fixed":"e4019aabfdf7dbc65d0f156e402c97936d1df283"},{"fixed":"d68510790f3d4bfd409678013cd5a63e9ac1b1b3"}],"database_specific":{"cpe":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"52.9"},{"fixed":"55.1"},{"fixed":"60"}],"source":"CPE_RANGE"}}],"versions":["v52.8","v55","v59","v58","v57","v56","v52.7","v52.6","v52.5","v52.4","v53","v52.2","v52.1","v52","v31","v27","v26","v24","v25","v23","v22","v21","v20","v19","v18","v17","v16","v15","v14","v12.3","ci-upgrade","v12","v11","v10","v9","v8","v7","v6","v3","v2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11041.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}