CVE-2016-0781

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-0781
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0781.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-0781
Published
2017-05-25T17:29:00.553Z
Modified
2026-03-14T09:17:30.064182Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in either the OAuth scopes (SCIM groups) or SCIM group descriptions.

References

Affected packages

Git / github.com/cloudfoundry/cf-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/cf-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6003f780fffc7e2e4dcf9ba76dc20a7bde65583c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
92af12278feea4e52e92229e3c256543bf2af19f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9334295133435fa77767651030500d2b0de62611
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2121dc6405e0f036efa4dba963f7f49b07e76ffa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b30e0fd53e3b4cccc0f0f42b03cd556122c70fbd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b8fcf9e7c45bdfdda3a7b2cef6e7739bce99439
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
758e3ce9f67c7c1995231c5fb11ab26201d6ac55
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5fa14702bca4d36d1fdc7241c63d0b3e40dcbe90
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fdc188e64859ea1cd91b237b7abf3ee929fc8252
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5fd76c798be025101915912171ab80f85516968f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
11a07541fc3cc296516efde4b303b9f67498d394
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6793254b0a2a5b861000c7fe9d001a3e7dbc0796
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce5a011be5cbc0f1d962e8910531542e773f117c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4eb9f4bb337f552fdc20df0220f662bcf5d62d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ebd045ff661302117b0c42e28d5770d1b742015f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55e40e21dfa39aa2726724e14c51c93c7df5542b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
545c1f95dc1cce46cc6d2f2ccbe6510f2693ff7c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5de34b6a1327e26dfc427989c4ae2c0c9302b719
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
baa394224fc5780f641d86d97e833575ada2094b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a7ead1d4e639153828a5add54ca16a0b45c9e22b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c73e6d21d24061dcd56ba141e2fca5f50600eb7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f7e63b6fb9a2f897bcc7cb1d92edfb61df626c11
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e31b98e104825c136d96a711bec2135f4a6ed33
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae0aca492ca3c5c2cc00ddaf9630b36372874b56
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "208"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "209"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "210"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "211"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "212"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "213"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "214"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "215"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "217"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "218"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "219"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "220"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "221"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "222"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "223"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "224"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "225"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "226"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "227"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "228"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "229"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "230"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "231"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "241"
        }
    ]
}
Type
GIT
Repo
https://github.com/cloudfoundry/uaa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae59bf11fec166fd075b1dbead2ae16effa57e3f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
96b1fc8e3a982b6f478e363f3919a4a16e0a6a92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58caa488fe3cc30f745b9f5079c42141d606436b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e0080f861db5b30c0793973e5c4fff7153040ecb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb75c2730c921667652b4589d67bec2246b1f306
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cde7ba5da9b64cb45bd64c61c6fb2899bbc3e0f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6f4197812dcb5da43b5c6bc2bed119c7cb51a649
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2324b38f690ff5809fefd8217b319c9dbdc10c99
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4f37e9b4f1a5da785ebc475559d2c64841daa163
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b5c13d793ebfe358e26559cedc6b528a557b43f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
769e65183c297651cdd7bedab1dff112f9d38920
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.2.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/cloudfoundry/uaa-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dc291df0c1f79318317ecf588a6846dc9db315c3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a630df6094e20e5c521fb4a0a33a6c501cdffb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9cd6ee5d5b4d07b8924e574feafd93a1327c034b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5a9496685d41c369a7d9871cff648c09ec231dfd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9be621523814a0fe03abb9118f6a6036e4f6345e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3732e7b8eccff5cd497a72d1eed1165d6dae60f1
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7"
        }
    ]
}

Affected versions

Other
-
list
log
scotty_09012012
v
v100
v101
v102
v103
v104
v105
v106
v107
v108
v109
v110
v111
v112
v113
v114
v115
v116
v117
v118
v119
v119-fixed
v120
v121
v122
v123
v124
v125
v126
v127
v128
v129
v130
v131
v132
v133
v134
v135
v136
v137
v138
v139
v140
v141
v142
v143
v144
v145
v146
v147
v148
v149
v150
v151
v152
v153
v154
v155
v156
v157
v158
v159
v160
v161
v162
v163
v164
v165
v166
v168
v169
v170
v171
v172
v173
v175
v176
v177
v178
v179
v180
v182
v183
v186
v187
v188
v189
v190
v191
v192
v193
v194
v195
v196
v197
v198
v199
v2
v200
v201
v202
v203
v204
v205
v206
v207
v208
v68
v69
v70
v71
v72
v73
v74
v75
v76
v77
v78
v79
v80
v81
v82
v83
v84
v85
v86
v87
v88
v89
v90
v91
v92
v93
v94
v95
v95-fixed
v96
v97
v98
v99
works-for-us
1.*
1.0.1
1.0.2
1.0.3
1.1
1.1.1
1.1.2
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.3.1
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.5.0
1.5.2
1.5.2.1
1.5.3
1.5.4
1.5.4.1
1.6.0
rc145.*
rc145.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0781.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "216"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.13"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.14"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.15"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.16"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.17"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.18"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.6.19"
            }
        ]
    }
]