Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-58398 · Microsoft / collected KEV context

EUVD-2024-55803

GHSA-7pxf-q642-mp95

GHSA-wcx9-ccpj-hx3c

GO-2024-3228

cve-program · CVE-2024-58398

• https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
• https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6
• https://www.vulncheck.com/advisories/coder-2.3.1-before-2.16.1-open-redirect-via-login-page-redirect-parameter

euvd · EUVD-2024-55803

• https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
• https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6
• https://www.vulncheck.com/advisories/coder-2.3.1-before-2.16.1-open-redirect-via-login-page-redirect-parameter

nvd · CVE-2024-58398

• https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6
• https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
• https://www.vulncheck.com/advisories/coder-2.3.1-before-2.16.1-open-redirect-via-login-page-redirect-parameter

osv · GHSA-wcx9-ccpj-hx3c

• https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
• https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6
• https://github.com/coder/coder

osv · GO-2024-3228

• https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
• https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6

No related operational record is retained in the current change model.