CVE-2023-41699
Payara Platform: URL Redirection to untrusted site using FORM authentication
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.
Vulnerabilidad de redirección de URL a sitio no confiable ('Open Redirect') en Payara Platform Payara Server, Micro y Embedded (módulos de implementación de Servlet) permite el acceso de redireccionamiento a librerías. Este problema afecta a Payara Server, Micro y Embedded: desde 5.0.0 antes de 5.57.0 , desde 4.1.2.191 anterior a 4.1.2.191.46, desde 6.0.0 anterior a 6.8.0, desde 6.2023.1 anterior a 6.2023.11.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2023-08-30 CVE Reserved
- 2023-11-15 CVE Published
- 2024-08-29 CVE Updated
- 2024-11-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
- CAPEC-159: Redirect Access to Libraries
References (2)
URL | Tag | Source |
---|---|---|
https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html | Release Notes | |
https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html | Release Notes |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Payara Search vendor "Payara" | Payara Search vendor "Payara" for product "Payara" | >= 4.1.2.191 < 4.1.2.191.46 Search vendor "Payara" for product "Payara" and version " >= 4.1.2.191 < 4.1.2.191.46" | community |
Affected
| ||||||
Payara Search vendor "Payara" | Payara Search vendor "Payara" for product "Payara" | >= 5.0.0 < 5.57.0 Search vendor "Payara" for product "Payara" and version " >= 5.0.0 < 5.57.0" | enterprise |
Affected
| ||||||
Payara Search vendor "Payara" | Payara Search vendor "Payara" for product "Payara" | >= 6.0.0 < 6.8.0 Search vendor "Payara" for product "Payara" and version " >= 6.0.0 < 6.8.0" | enterprise |
Affected
| ||||||
Payara Search vendor "Payara" | Payara Search vendor "Payara" for product "Payara" | >= 6.2023.1 < 6.2023.11 Search vendor "Payara" for product "Payara" and version " >= 6.2023.1 < 6.2023.11" | community |
Affected
|