Lucene search

K
cvelistPayaraCVELIST:CVE-2023-41699
HistoryNov 15, 2023 - 7:54 p.m.

CVE-2023-41699 Payara Platform: URL Redirection to untrusted site using FORM authentication

2023-11-1519:54:23
CWE-601
Payara
www.cve.org
payara platform
url redirection
untrusted site
open redirect
authentication
vulnerability
servlet implementation modules

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Servlet Implementation"
    ],
    "product": "Payara Server, Micro and Embedded",
    "vendor": "Payara Platform",
    "versions": [
      {
        "lessThan": "5.57.0",
        "status": "affected",
        "version": "5.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.1.2.191.46",
        "status": "affected",
        "version": "4.1.2.191",
        "versionType": "semver"
      },
      {
        "lessThan": "6.8.0",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "6.2023.11",
        "status": "affected",
        "version": "6.2023.1",
        "versionType": "semver"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

Related for CVELIST:CVE-2023-41699