GHSA-6wcw-r64p-qrrw
Cloudfoundry UAA has logic error in the token revocation endpoint implementation
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.cloudfoundry.identity:cloudfoundry-identity-server | >= 77.30.0, < 78.8.0 | 78.8.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
References
External links from the advisory. They lead to third-party sites.