CVE-2023-45648 Apache Tomcat: Trailer header parsing too lenient

2023-10-1018:38:34

CWE-20

apache

github.com

cve-2023-45648

apache tomcat

input validation

vulnerability

http trailer headers

request smuggling

upgrade

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially
crafted, invalid trailer header could cause Tomcat to treat a single
request as multiple requests leading to the possibility of request
smuggling when behind a reverse proxy.

Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fix the issue.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:apache:tomcat:-:*:*:*:*:*:*:*"
    ],
    "vendor": "apache",
    "product": "tomcat",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "11.0.0-m1"
      },
      {
        "status": "affected",
        "version": "10.10-m,1",
        "versionType": "semver",
        "lessThanOrEqual": "10.1.13"
      },
      {
        "status": "affected",
        "version": "9.0.0-m1",
        "versionType": "semver",
        "lessThanOrEqual": "9.0.81"
      },
      {
        "status": "affected",
        "version": "8.5.0",
        "versionType": "semver",
        "lessThanOrEqual": "8.5.93"
      }
    ],
    "defaultStatus": "unknown"
  }
]