CVEvulnerability
CVE-2023-41699
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-15
- Last modified
- 2026-06-17
- Assigner
- 769c9ae7-73c3-4e47-ae19-903170fc3eb8
- CVSS 3.1 (769c9ae7-73c3-4e47-ae19-903170fc3eb8)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-601
Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.
Affected configurations
• payara payara (>= 4.1.2.191 < 4.1.2.191.46)
• payara payara (>= 5.0.0 < 5.57.0)
• payara payara (>= 6.0.0 < 6.8.0)
• payara payara (>= 6.2023.1 < 6.2023.11)
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html Release Notes
- https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html Release Notes
- https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html Release Notes
- https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html Release Notes