TheThingsNetwork/lorawan-stack

TheThingsNetwork/lorawan-stack

GitHubGitHub
GitHubgithub.com
www.thethingsindustries.comwww.thethingsindustries.com
Releases151
Frequency3 weeks 2 hours
Last Release
Stars1.15K
The Things Stack, an Open Source LoRaWAN Network Server
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-26494↗
6.1 MEDIUM—

lorawan-stack is an open source LoRaWAN network server. Prior to version 3.24.1, an open redirect exists on the login page of the lorawan stack server, allowing an attacker to supply a user controlled redirect upon sign in. This issue may allows malicious actors to phish users, as users assume they were redirected to the homepage on login. Version 3.24.1 contains a fix.