Athenz vulnerable to Open Redirect

MEDIUM 6.1CVE-2019-6035 · GHSA-9hg5-7hwc-v434 · Published 26/12/2019 · updated 17/06/2026

In short

CVE-2019-6035 is a MEDIUM (CVSS 6.1) vulnerability affecting com.yahoo.athenz:athenz, athenz (yahoo).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.2% of all vulnerabilities.
Fix: update to 1.8.25 or later.

Package	Affected versions	Patched versions
com.yahoo.athenz:athenz Maven	`< 1.8.25`	`1.8.25`
athenz yahoo	`≤ 1.8.24`	No fix yet

Description

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

NVD description

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

References

nvd.nist.gov/vuln/detail/CVE-2019-6035 · ADVISORY
yahoo/athenz#700 · WEB
AthenZ/athenz commit c4dc89b · WEB
AthenZ/athenz · PACKAGE
jvn.jp/en/jp/JVN57070811/index.html · WEB
yahoo/athenz · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free