Lucene search

[email protected]CVE-2023-41080

HistoryAug 25, 2023 - 9:15 p.m.

CVE-2023-41080

2023-08-2521:15:09

CWE-601

[email protected]

web.nvd.nist.gov

660

cve-2023-41080

url redirection

untrusted site

open redirect

apache tomcat

vulnerability

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

64.6%

JSON

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.

The vulnerability is limited to the ROOT (default) web application.

Affected configurations

Vulners

NVD

Node

apache_software_foundationapache_strutsRange≤11.0.0-M10

apache_software_foundationapache_strutsRange≤10.0.12

apache_software_foundationapache_strutsRange≤9.0.79

apache_software_foundationapache_strutsRange≤8.5.92

VendorProductVersionCPE
apachetomcatcpe:/a:apache:tomcat::::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone7::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone9::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone1::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone8::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone10::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone6::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone2::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone5::
apachetomcat11.0.0cpe:/a:apache:tomcat:11.0.0:milestone3::

Vendor	Product	Version	CPE
apache	tomcat		cpe:/a:apache:tomcat::::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone7::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone9::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone1::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone8::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone10::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone6::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone2::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone5::
apache	tomcat	11.0.0	cpe:/a:apache:tomcat:11.0.0:milestone3::

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.0-M10",
        "status": "affected",
        "version": "11.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.0.12",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.79",
        "status": "affected",
        "version": "9.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.5.92",
        "status": "affected",
        "version": "8.5.0",
        "versionType": "semver"
      }
    ]
  }
]