Skip to content

Product

concourse github.com/concourse/dex vulnerabilities

1 published CVE affecting concourse github.com/concourse/dex, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest concourse github.com/concourse/dex CVEs

Newest publication first

  1. CVE-2020-5415 Concourse's GitLab auth allows impersonation

    Published
    CriticalCVSS 10.0 EPSS 1.2%

    Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not ha...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.