What’s Vulnerable › Vulnerabilities
CVE-2017-8047
- Severity: medium (CVSS 6.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-10-04 · updated 2026-06-17
- Weakness: CWE-601
Description
In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.
Affected products
- Cloud Foundry Cloud Controller cf-release versions prior to v255: through 273
- Pivotal Routing-Release: through 0.162.0
References
Get alerted when CVE-2017-8047 or the next vulnerability affects your stack