CVE-2022-38131

MEDIUMNuclei

RStudio Connect - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-38131 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

RStudio Connect

CVE ListAll versionsaffected

Nuclei templates

1
ProjectDiscoveryMEDIUMRStudio Connect - Open RedirectCVSS 6.1

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.

Impact

An attacker can exploit the vulnerability to redirect users to malicious websites, potentially leading to phishing attacks or other security breaches.

Remediation

This issue is fixed in Connect v2023.05. Additionally, for users running Connect v1.7.2 and later, the issue is resolvable via a configuration setting mentioned in the support article.

WeaknessesCWE-601
Authorsxxcdd
Template tagstenablecvecve2022redirectrstudiovuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:rstudio:connect:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:217119619
Shodan: http.title:"openvpn connect"
FOFA: app="RStudio-Connect"
FOFA: title="openvpn connect"
Google: intitle:"openvpn connect"
https://tenable.com/security/research/tra-2022-30 https://support.posit.co/hc/en-us/articles/10983374992023-CVE-2022-38131-configuration-issue-in-Posit-Connect https://github.com/JoshuaMart/JoshuaMart

Source: ProjectDiscovery

References

3