CVE-2017-8047: Medium severity Cloudfoundry Cf-release vulnerability
In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8047?
CVE-2017-8047 is classified as a moderate severity vulnerability due to its potential for exploitation in phishing attacks.
How do I fix CVE-2017-8047?
To fix CVE-2017-8047, upgrade to Cloud Foundry router routing-release version 0.163.0 or later and cf-release version 274 or later.
What versions are affected by CVE-2017-8047?
CVE-2017-8047 affects Cloud Foundry router routing-release versions prior to 0.163.0 and cf-release versions prior to 274.
What type of vulnerability is CVE-2017-8047?
CVE-2017-8047 is an open redirect vulnerability that can be exploited in applications using Cloud Foundry.
Can CVE-2017-8047 lead to further attacks?
Yes, CVE-2017-8047 can be used by attackers to carry out phishing attacks which may lead to credential theft.