Lucene search

[email protected]CVE-2023-41080

HistoryAug 25, 2023 - 9:15 p.m.

CVE-2023-41080

2023-08-2521:15:09

CWE-601

[email protected]

web.nvd.nist.gov

647

cve-2023-41080

url redirection

untrusted site

open redirect

apache tomcat

vulnerability

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.

The vulnerability is limited to the ROOT (default) web application.

Affected configurations

Vulners

NVD

Node

apachetomcatRange≤11.0.0-M10

apachetomcatRange≤10.0.12

apachetomcatRange≤9.0.79

apachetomcatRange≤8.5.92

CPENameOperatorVersion
apache:tomcatapache tomcatle8.5.92
apache:tomcatapache tomcatle9.0.79
apache:tomcatapache tomcatle10.1.12
apache:tomcatapache tomcateq11.0.0

CPE	Name	Operator	Version
apache:tomcat	apache tomcat	le	8.5.92
apache:tomcat	apache tomcat	le	9.0.79
apache:tomcat	apache tomcat	le	10.1.12
apache:tomcat	apache tomcat	eq	11.0.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.0-M10",
        "status": "affected",
        "version": "11.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.0.12",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.79",
        "status": "affected",
        "version": "9.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.5.92",
        "status": "affected",
        "version": "8.5.0",
        "versionType": "semver"
      }
    ]
  }
]