2250144 – (CVE-2023-41699) CVE-2023-41699 payara: URL redirection to untrusted site

Bug 2250144 (CVE-2023-41699) - CVE-2023-41699 payara: URL redirection to untrusted site

Summary: CVE-2023-41699 payara: URL redirection to untrusted site

Keywords:
Status:	NEW
Alias:	CVE-2023-41699
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	2250143
TreeView+	depends on / blocked

Reported:	2023-11-16 18:35 UTC by Robb Gatica
Modified:	2024-06-26 08:07 UTC (History)
CC List:	2 users (show)
Fixed In Version:	payara 6.8.0
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description Robb Gatica 2023-11-16 18:35:49 UTC

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.

https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html
https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html

Note You need to log in before you can comment on or make changes to this bug.