← Database

CVE-2024-7312

MEDIUM CVSS: 6.1 Published: 2024-09-11 Modified: 2026-06-17

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before 5.67.0, from 4.1.2.191.0 before 4.1.2.191.50.

Affected Platforms

Payara Payara

Weakness Type

CWE-601, CWE-601

References