Medium severity6.1NVD Advisory· Published Nov 15, 2023· Updated Jun 17, 2026

CVE-2023-41699

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.

Affected products

Payara Platform/Payara Embeddedllm-create
Range: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11
Payara Platform/Payara Serverllm-create
Range: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11
Payara Platform/Payara Microllm-create
Range: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11
Payara Platform/Payara Server, Micro And Embeddedv5
Range: 5.0.0

Patches

Vulnerability mechanics

References

docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.htmlnvdRelease Notes
docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.htmlnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000