CVE-2023-41080

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Aug 25, 2023
Updated: Nov 3, 2023
CWE ID 601

Summary

CVE-2023-41080 is a URL Redirection vulnerability affecting various versions of Apache Tomcat's FORM authentication feature. This Open Redirect issue allows an attacker to redirect users to untrusted sites, potentially leading to phishing or data theft. The vulnerability affects Apache Tomcat versions from 11.0.0-M1 through 11.0.0-M10, 10.1.0-M1 through 10.0.12, 9.0.0-M1 through 9.0.79, and 8.5.0 through 8.5.92. Importantly, this vulnerability is limited to the default ROOT web application.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache Tomcat
  • Debian

Affected Vendors

  • Apache Software Foundation
  • Debian

Advisories, Assessments, and Mitigations