Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.

Remediation

References

CVE-2023-41080

Related Vulnerabilities

Jenkins Cryptographic Issues Vulnerability (CVE-2014-2061)

Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)

PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5287)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.18)

Liferay DXP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42120)

Severity

Medium

Classification

CVE-2023-41080 CWE-601 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities