Lucene search
F5F5:K000136011HistoryAug 29, 2023 - 12:00 a.m.
K000136011 : Apache Tomcat Open Redirect vulnerability CVE-2023-41080
2023-08-2900:00:00
my.f5.com
11
url redirection
untrusted site
form authentication
apache tomcat
cve-2023-41080
vulnerability
root web application
f5 products
Security Advisory Description
URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application. (CVE-2023-41080)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
tomcat
tomcat
Fixed in Apache Tomcat 9.0.80
2023-08-25 00:00:00
Fixed in Apache Tomcat 10.1.13
2023-08-25 00:00:00
Fixed in Apache Tomcat 8.5.93
2023-08-25 00:00:00
cnvd
cnvd
Apache Tomcat Open Redirect Vulnerability (CNVD-2023-80565)
2023-08-29 00:00:00
nessus
nessus
Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-009)
2023-09-27 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-015)
2023-09-27 00:00:00
Apache Tomcat 8.5.0 < 8.5.93
2023-08-25 00:00:00
ibm
ibm
cgr
cgr
CVE-2023-41080 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
Apache Tomcat Open Redirect Vulnerability (Aug 2023) - Windows
2023-08-28 00:00:00
Apache Tomcat Open Redirect Vulnerability (Aug 2023) - Linux
2023-08-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3987-1)
2023-10-06 00:00:00
prion
prion
Open redirect
2023-08-25 21:15:00
redhatcve
redhatcve
CVE-2023-41080
2023-08-30 15:16:29
nvd
nvd
CVE-2023-41080
2023-08-25 21:15:09
osv
osv
Apache Tomcat Open Redirect vulnerability
2023-08-25 21:30:48
BIT-tomcat-2023-41080
2024-03-06 11:08:22
CVE-2023-41080
2023-08-25 21:15:09
kaspersky
kaspersky
KLA52554 SB vulnerability in Apache Tomcat
2023-08-25 00:00:00
ubuntucve
ubuntucve
CVE-2023-41080
2023-08-25 00:00:00
cve
cve
CVE-2023-41080
2023-08-25 21:15:09
github
github
Apache Tomcat Open Redirect vulnerability
2023-08-25 21:30:48
debiancve
debiancve
CVE-2023-41080
2023-08-25 21:15:09
cvelist
cvelist
CVE-2023-41080 Apache Tomcat: Open redirect with FORM authentication
2023-08-25 20:39:36
veracode
veracode
Open Redirect
2023-08-29 11:34:15
atlassian
atlassian
Upgrade Tomcat to fix CVE-2023-41080
2023-09-07 01:11:07
amazon
amazon
Important: tomcat8
2023-10-12 15:48:00
redhat
redhat
almalinux
almalinux
Moderate: tomcat security update
2024-01-25 00:00:00
Moderate: tomcat security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
tomcat security update
2024-01-25 00:00:00
tomcat security update
2024-01-11 00:00:00
debian
debian
[SECURITY] [DSA 5521-1] tomcat10 security update
2023-10-10 22:09:33
[SECURITY] [DLA 3617-1] tomcat9 security update
2023-10-13 13:58:32
[SECURITY] [DSA 5522-1] tomcat9 security update
2023-10-10 22:11:02
rosalinux
rosalinux
Advisory ROSA-SA-2024-2418
2024-05-14 08:49:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00