CVE-2023-6545

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

Score

CVSS 3.1 4.7 Medium

Status

Modified - info@cert.vde.com

Published

2023-12-14

Last modified

2024-08-27

Weaknesses

CWE-601

Affected products

• Authelia-bhf (Beckhoff)
• Authelia-bhf Of Twincatbsd (Beckhoff)

References

• https://cert.vde.com/en/advisories/VDE-2023-067/
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf