CLSA-2025-1763032400 mod_jk: Fix of CVE-2023-41081

🗓️ 13 Nov 2025 11:13:24Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Fix authentication bypass CVE-2023-41081 by removing implicit mapping in mod_jk library.

Reporter	Title	Published	Views	Family All 53
AlmaLinux	Moderate: mod_jk and mod_proxy_cluster security update	30 Apr 202400:00	–	almalinux
BDU FSTEC	The vulnerability of the JkOptions+ForwardDirectories configuration in the mod_jk module of the server modules for connecting applications like Tomcat and Apache Tomcat Connectors allows attackers to circumvent security restrictions and gain unauthorized access to protected information.	19 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-41081	13 Sep 202314:23	–	circl
CNNVD	Apache Tomcat Security Vulnerability	13 Sep 202300:00	–	cnnvd
CVE	CVE-2023-41081	13 Sep 202309:30	–	cve
Cvelist	CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request	13 Sep 202309:30	–	cvelist
Debian	[SECURITY] [DLA 3580-1] libapache-mod-jk security update	24 Sep 202317:22	–	debian
Debian CVE	CVE-2023-41081	13 Sep 202309:30	–	debiancve
Tenable Nessus	Debian dla-3580 : libapache-mod-jk-doc - security update	25 Sep 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : mod_jk-1.2.49-1.el9, mod_proxy_cluster-1.3.20-1.el9 (AXSA:2024-7930:01)	20 Jan 202600:00	–	nessus