CVE-2023-41080
EUVD-2023-233525.08.2023, 21:15
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.
Older, EOL versions may also be affected.
The vulnerability is limited to the ROOT (default) web application.Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | tomcat | 8.5.0 ≤ 𝑥 ≤ 8.5.92 |
| apache | tomcat | 9.0.0 ≤ 𝑥 ≤ 9.0.79 |
| apache | tomcat | 10.1.0 ≤ 𝑥 ≤ 10.1.12 |
| apache | tomcat | 11.0.0:milestone1 |
| apache | tomcat | 11.0.0:milestone10 |
| apache | tomcat | 11.0.0:milestone2 |
| apache | tomcat | 11.0.0:milestone3 |
| apache | tomcat | 11.0.0:milestone4 |
| apache | tomcat | 11.0.0:milestone5 |
| apache | tomcat | 11.0.0:milestone6 |
| apache | tomcat | 11.0.0:milestone7 |
| apache | tomcat | 11.0.0:milestone8 |
| apache | tomcat | 11.0.0:milestone9 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tomcat6 |
| ||||||||||||||||||
| tomcat7 |
| ||||||||||||||||||
| tomcat8 |
| ||||||||||||||||||
| tomcat9 |
|
Common Weakness Enumeration
References