CVE-2023-6545

Summary

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

Affected Software

Weaknesses

• CWE-601: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

ADP Enrichment

CVE Program Container

Additional References

• https://cert.vde.com/en/advisories/VDE-2023-067/
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://cert.vde.com/en/advisories/VDE-2023-067/
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf

• ←Previous
• Next→