CVE-2023-41080

Katalog CVE

CVSS 6.1 · Medium EPSS 6,5%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada apache tomcat, debian linux. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.

Rincian

Terbit di NVD

25 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

6,5% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f issue tracking · patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230921-0006/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5521 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5522 advisory pihak ketiga