CVE-2022-38131

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.

Affected

RStudio Connect

CVSS v3.1 NVD

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

1.66% chance of exploitation in the next 30 days, 76th percentile

Nuclei

medium · CWE-601

Published

2022-09-06

Updated

2024-08-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38131.yaml

Security advisories

• https://support.posit.co/hc/en-us/articles/10983374992023
• https://tenable.com/security/research/tra-2022-30

References

• CVE Record
• NVD entry