Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-7312

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before 5.67.0, from 4.1.2.191.0 before 4.1.2.191.50.

Published

2024-09-11T16:15:08.080

Last Modified

2024-09-13T16:27:50.577

Status

Analyzed

Source

769c9ae7-73c3-4e47-ae19-903170fc3eb8

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-601
  • Type: Primary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application payara payara < 4.1.2.191.50 Yes
Application payara payara < 5.67.0 Yes
Application payara payara < 5.2022.5 Yes
Application payara payara < 6.18.0 Yes
Application payara payara < 6.2024.9 Yes
References