CVE-2023-41699

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:payara:payara:*:*:*:*:community:*:*:*
cpe:2.3:a:payara:payara:*:*:*:*:community:*:*:*
cpe:2.3:a:payara:payara:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:payara:payara:*:*:*:*:enterprise:*:*:*

History

23 Nov 2023, 03:41

Type Values Removed Values Added
References () https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html - () https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html - Release Notes
References () https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html - () https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html - Release Notes
CWE CWE-601
CPE cpe:2.3:a:payara:payara:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:payara:payara:*:*:*:*:community:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
First Time Payara
Payara payara

15 Nov 2023, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-15 20:15

Updated : 2023-11-23 03:41


NVD link : CVE-2023-41699

Mitre link : CVE-2023-41699


JSON object : View

Products Affected

payara

  • payara
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')