CVE-2023-6545 - Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

Back Back to CVE browser

MEDIUM

Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

Published Dec 14, 2023

4.7

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

Affected products

Vendor Beckhoff Product authelia-bhf of TwinCAT/BSD Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <4.37.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Beckhoff

authelia-bhf of TwinCAT/BSD

unaffected

Version	Status	Constraints
0	affected	<4.37.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

https://cert.vde.com/en/advisories/VDE-2023-067/
Third Party Advisory
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf
Vendor Advisory

Link	Providers	Tags
https://cert.vde.com/en/advisories/VDE-2023-067/		Third Party Advisory
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner CERTVDE

Published Dec 14, 2023

Updated Aug 27, 2024

Reserved Dec 6, 2023

Link CVE-2023-6545

CISA Vulnrichment

Updated Aug 27, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-6545

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-6545