CVE-2024-7312CWE-601

REST Interface Link Redirection via Host parameter

High · published September 11, 2024

CVSS v4.0
7.0
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before 5.67.0, from 4.1.2.191.0 before 4.1.2.191.50.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-09-11T15:28Z
EPSS history
Timeline
  • 11 SEP 15:28Z
    REST Interface Link Redirection via Host parameter
    cvelistv5