CVE-2017-8044

In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.

• CWE-79

• http://www.securityfocus.com/bid/100618Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2017-8044Vendor Advisory
• http://www.securityfocus.com/bid/100618Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2017-8044Vendor Advisory

Published

Nov 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8038In Cloud Foundry Foundation Credhub-release version 1.1.0, a…
• CVE-2017-8039An issue was discovered in Pivotal Spring Web Flow through 2…
• CVE-2017-8040In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x vers…6.5
• CVE-2017-8041In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x vers…6.1
• CVE-2017-8042Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-8043Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-8045In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and …
• CVE-2017-8046Malicious PATCH requests submitted to servers using Spring D…9.8
• CVE-2017-8047In Cloud Foundry router routing-release all versions prior t…
• CVE-2017-8048In Cloud Foundry capi-release versions 1.33.0 and later, pri…
• CVE-2017-8049Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-8050Tenable Appliance 4.4.0, and possibly prior, contains a flaw…