CVE-2023-41699

Payara Platform: URL Redirection to untrusted site using FORM authentication

State: Published
Severity: 6.1 Medium
Published: Nov 15, 2023
Updated: Aug 29, 2024
Reserved: Aug 30, 2023

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	Payara

Weaknesses

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

Product	Versions
Payara Server, Micro and EmbeddedPayara Platform	5.0.0 to before 5.57.0Affected 4.1.2.191 to before 4.1.2.191.46Affected 6.0.0 to before 6.8.0Affected 6.2023.1 to before 6.2023.11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.