Lucene search
PRIOn knowledge basePRION:CVE-2023-45648HistoryOct 10, 2023 - 7:15 p.m.
Input validation
2023-10-1019:15:00
PRIOn knowledge base
www.prio-n.com
33
input validation
apache tomcat
vulnerability
request smuggling
http trailer headers
upgrade
nvd
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially
crafted, invalid trailer header could cause Tomcat to treat a single
request as multiple requests leading to the possibility of request
smuggling when behind a reverse proxy.
Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fix the issue.
Related
redhatcve
redhatcve
CVE-2023-45648
2023-10-24 03:27:24
amazon
amazon
Important: tomcat
2024-03-13 20:26:00
Important: tomcat8
2023-10-16 13:45:00
nessus
nessus
Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-012)
2024-03-18 00:00:00
Amazon Linux 2 : tomcat (ALAS-2024-2501)
2024-03-18 00:00:00
SUSE SLES12 Security Update : tomcat (SUSE-SU-2023:4337-1)
2023-11-03 00:00:00
ibm
ibm
github
github
Apache Tomcat Improper Input Validation vulnerability
2023-10-10 21:31:12
debiancve
debiancve
CVE-2023-45648
2023-10-10 19:15:09
cvelist
cvelist
CVE-2023-45648 Apache Tomcat: Trailer header parsing too lenient
2023-10-10 18:38:34
nvd
nvd
CVE-2023-45648
2023-10-10 19:15:09
osv
osv
Apache Tomcat Improper Input Validation vulnerability
2023-10-10 21:31:12
CVE-2023-45648
2023-10-10 19:15:09
BIT-tomcat-2023-45648
2024-03-06 11:07:43
f5
f5
K000137965 : Apache Tomcat vulnerability CVE-2023-45648
2023-12-19 00:00:00
ubuntucve
ubuntucve
CVE-2023-45648
2023-10-10 00:00:00
veracode
veracode
Request Smuggling
2023-10-12 11:56:46
cve
cve
CVE-2023-45648
2023-10-10 19:15:09
hackerone
hackerone
redhat
redhat
(RHSA-2023:6207) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:48
(RHSA-2023:6206) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:53
(RHSA-2024:0125) Moderate: tomcat security update
2024-01-10 09:29:51
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2023-11-15 14:35:09
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0319)
2023-11-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4337-1)
2023-11-03 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2024-1305)
2024-03-12 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 11.0.0-M12
2023-10-10 00:00:00
Fixed in Apache Tomcat 10.1.14
2023-10-10 00:00:00
Fixed in Apache Tomcat 9.0.81
2023-10-10 00:00:00
qualysblog
qualysblog
CVE-2023-44487 HTTP/2 Rapid Reset Attack
2023-10-10 22:01:49
kaspersky
kaspersky
KLA61362 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
KLA61363 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
almalinux
almalinux
Moderate: tomcat security update
2024-01-25 00:00:00
Moderate: tomcat security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
tomcat security update
2024-01-25 00:00:00
tomcat security update
2024-01-11 00:00:00
redos
redos
ROS-20240405-12
2024-04-05 00:00:00
debian
debian
[SECURITY] [DSA 5521-1] tomcat10 security update
2023-10-10 22:09:33
[SECURITY] [DLA 3617-1] tomcat9 security update
2023-10-13 13:58:32
[SECURITY] [DSA 5522-1] tomcat9 security update
2023-10-10 22:11:02
rosalinux
rosalinux
Advisory ROSA-SA-2024-2418
2024-05-14 08:49:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00