Lucene search
Redhat.comRH:CVE-2023-45648HistoryOct 24, 2023 - 3:27 a.m.
CVE-2023-45648
2023-10-2403:27:24
redhat.com
access.redhat.com
111
apache tomcat
input validation
crafted request
invalid trailer header
request smuggling
reverse proxy
0.002 Low
EPSS
Percentile
60.1%
A flaw was found in Apache Tomcat, where an improper input validation can occur. This flaw allows a malicious user to send a crafted request containing an invalid trailer header, which could be treated as multiple requests, potentially leading to request smuggling when behind a reverse proxy.
Mitigation
No mitigation is currently available for this flaw.
Related
veracode
veracode
Request Smuggling
2023-10-12 11:56:46
ubuntucve
ubuntucve
CVE-2023-45648
2023-10-10 00:00:00
cve
cve
CVE-2023-45648
2023-10-10 19:15:09
nessus
nessus
Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-012)
2024-03-18 00:00:00
Amazon Linux 2 : tomcat (ALAS-2024-2501)
2024-03-18 00:00:00
amazon
amazon
Important: tomcat
2024-03-13 20:26:00
Important: tomcat8
2023-10-16 13:45:00
ibm
ibm
prion
prion
Input validation
2023-10-10 19:15:00
github
github
Apache Tomcat Improper Input Validation vulnerability
2023-10-10 21:31:12
hackerone
hackerone
osv
osv
BIT-tomcat-2023-45648
2024-03-06 11:07:43
Apache Tomcat Improper Input Validation vulnerability
2023-10-10 21:31:12
CVE-2023-45648
2023-10-10 19:15:09
f5
f5
K000137965 : Apache Tomcat vulnerability CVE-2023-45648
2023-12-19 00:00:00
debiancve
debiancve
CVE-2023-45648
2023-10-10 19:15:09
cvelist
cvelist
CVE-2023-45648 Apache Tomcat: Trailer header parsing too lenient
2023-10-10 18:38:34
redhat
redhat
(RHSA-2023:6207) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:48
(RHSA-2023:6206) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:53
(RHSA-2024:0474) Moderate: tomcat security update
2024-01-24 14:41:09
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2023-11-15 14:35:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4337-1)
2023-11-03 00:00:00
Mageia: Security Advisory (MGASA-2023-0319)
2023-11-16 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2024-1305)
2024-03-12 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 11.0.0-M12
2023-10-10 00:00:00
Fixed in Apache Tomcat 10.1.14
2023-10-10 00:00:00
Fixed in Apache Tomcat 9.0.81
2023-10-10 00:00:00
qualysblog
qualysblog
CVE-2023-44487 HTTP/2 Rapid Reset Attack
2023-10-10 22:01:49
kaspersky
kaspersky
KLA61362 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
KLA61363 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
redos
redos
ROS-20240405-12
2024-04-05 00:00:00
almalinux
almalinux
Moderate: tomcat security update
2024-01-10 00:00:00
Moderate: tomcat security update
2024-01-25 00:00:00
oraclelinux
oraclelinux
tomcat security update
2024-01-25 00:00:00
tomcat security update
2024-01-11 00:00:00
debian
debian
[SECURITY] [DLA 3617-1] tomcat9 security update
2023-10-13 13:59:04
[SECURITY] [DSA 5522-1] tomcat9 security update
2023-10-10 22:11:02
[SECURITY] [DSA 5521-1] tomcat10 security update
2023-10-10 22:09:33
rosalinux
rosalinux
Advisory ROSA-SA-2024-2418
2024-05-14 08:49:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00