Vulnerabilities > CVE-2023-26494 - Unspecified vulnerability in Thethingsnetwork Lorawan-Stack

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

thethingsnetwork

NVD

Published: 2023-04-24

Updated: 2024-11-21

Summary

lorawan-stack is an open source LoRaWAN network server. Prior to version 3.24.1, an open redirect exists on the login page of the lorawan stack server, allowing an attacker to supply a user controlled redirect upon sign in. This issue may allows malicious actors to phish users, as users assume they were redirected to the homepage on login. Version 3.24.1 contains a fix.

Vulnerable Configurations

Part	Description	Count
Application	Thethingsnetwork Thethingsnetwork Lorawan Stack 3.0.0 Thethingsnetwork Lorawan Stack 3.0.1 Thethingsnetwork Lorawan Stack 3.0.2 Thethingsnetwork Lorawan Stack 3.0.3 Thethingsnetwork Lorawan Stack 3.0.4 Thethingsnetwork Lorawan Stack 3.1.0 Thethingsnetwork Lorawan Stack 3.1.1 Thethingsnetwork Lorawan Stack 3.1.2 Thethingsnetwork Lorawan Stack 3.2.0 Thethingsnetwork Lorawan Stack 3.2.1 Thethingsnetwork Lorawan Stack 3.2.2 Thethingsnetwork Lorawan Stack 3.2.3 Thethingsnetwork Lorawan Stack 3.2.4 Thethingsnetwork Lorawan Stack 3.2.5 Thethingsnetwork Lorawan Stack 3.2.6 Thethingsnetwork Lorawan Stack 3.3.0 Thethingsnetwork Lorawan Stack 3.3.1 Thethingsnetwork Lorawan Stack 3.3.2 Thethingsnetwork Lorawan Stack 3.4.0 Thethingsnetwork Lorawan Stack 3.4.1 Thethingsnetwork Lorawan Stack 3.4.2 Thethingsnetwork Lorawan Stack 3.5.0 Thethingsnetwork Lorawan Stack 3.5.1 Thethingsnetwork Lorawan Stack 3.5.2 Thethingsnetwork Lorawan Stack 3.5.3 Thethingsnetwork Lorawan Stack 3.6.0 Thethingsnetwork Lorawan Stack 3.6.1 Thethingsnetwork Lorawan Stack 3.6.2 Thethingsnetwork Lorawan Stack 3.6.3 Thethingsnetwork Lorawan Stack 3.7.0 Thethingsnetwork Lorawan Stack 3.7.1 Thethingsnetwork Lorawan Stack 3.7.2 Thethingsnetwork Lorawan Stack 3.8.0 Thethingsnetwork Lorawan Stack 3.8.1 Thethingsnetwork Lorawan Stack 3.8.2 Thethingsnetwork Lorawan Stack 3.8.3 Thethingsnetwork Lorawan Stack 3.8.4 Thethingsnetwork Lorawan Stack 3.8.5 Thethingsnetwork Lorawan Stack 3.8.6 Thethingsnetwork Lorawan Stack 3.8.7 Thethingsnetwork Lorawan Stack 3.9.0 Thethingsnetwork Lorawan Stack 3.9.1 Thethingsnetwork Lorawan Stack 3.9.3 Thethingsnetwork Lorawan Stack 3.9.4 Thethingsnetwork Lorawan Stack 3.9.5 Thethingsnetwork Lorawan Stack 3.10.0 Thethingsnetwork Lorawan Stack 3.10.1 Thethingsnetwork Lorawan Stack 3.10.2 Thethingsnetwork Lorawan Stack 3.10.3 Thethingsnetwork Lorawan Stack 3.10.4 Thethingsnetwork Lorawan Stack 3.10.5 Thethingsnetwork Lorawan Stack 3.10.6 Thethingsnetwork Lorawan Stack 3.10.7 Thethingsnetwork Lorawan Stack 3.10.10 Thethingsnetwork Lorawan Stack 3.11.0 Thethingsnetwork Lorawan Stack 3.11.1 Thethingsnetwork Lorawan Stack 3.11.2 Thethingsnetwork Lorawan Stack 3.11.3 Thethingsnetwork Lorawan Stack 3.11.4 Thethingsnetwork Lorawan Stack 3.12.0 Thethingsnetwork Lorawan Stack 3.12.1 Thethingsnetwork Lorawan Stack 3.12.2 Thethingsnetwork Lorawan Stack 3.12.3 Thethingsnetwork Lorawan Stack 3.13.0 Thethingsnetwork Lorawan Stack 3.13.1 Thethingsnetwork Lorawan Stack 3.13.2 Thethingsnetwork Lorawan Stack 3.13.3 Thethingsnetwork Lorawan Stack 3.14.0 Thethingsnetwork Lorawan Stack 3.14.1 Thethingsnetwork Lorawan Stack 3.14.2 Thethingsnetwork Lorawan Stack 3.15.0 Thethingsnetwork Lorawan Stack 3.15.1 Thethingsnetwork Lorawan Stack 3.15.2 Thethingsnetwork Lorawan Stack 3.15.3 Thethingsnetwork Lorawan Stack 3.16.0 Thethingsnetwork Lorawan Stack 3.16.1 Thethingsnetwork Lorawan Stack 3.16.2 Thethingsnetwork Lorawan Stack 3.16.3 Thethingsnetwork Lorawan Stack 3.17.0 Thethingsnetwork Lorawan Stack 3.17.1 Thethingsnetwork Lorawan Stack 3.17.2 Thethingsnetwork Lorawan Stack 3.18.0 Thethingsnetwork Lorawan Stack 3.18.1 Thethingsnetwork Lorawan Stack 3.18.2 Thethingsnetwork Lorawan Stack 3.19.0 Thethingsnetwork Lorawan Stack 3.19.1 Thethingsnetwork Lorawan Stack 3.19.2 Thethingsnetwork Lorawan Stack 3.20.0 Thethingsnetwork Lorawan Stack 3.20.1 Thethingsnetwork Lorawan Stack 3.20.2 Thethingsnetwork Lorawan Stack 3.21.0 Thethingsnetwork Lorawan Stack 3.21.1 Thethingsnetwork Lorawan Stack 3.21.2 Thethingsnetwork Lorawan Stack 3.22.0 Thethingsnetwork Lorawan Stack 3.22.1 Thethingsnetwork Lorawan Stack 3.22.2 Thethingsnetwork Lorawan Stack 3.23.0 Thethingsnetwork Lorawan Stack 3.23.1 Thethingsnetwork Lorawan Stack 3.23.2 Thethingsnetwork Lorawan Stack 3.24.0	114

Summary

Vulnerable Configurations

References