CVE-2023-45648

Summary

CVE-2023-45648 is an Input Validation vulnerability affecting various versions of Apache Tomcat. Specifically, Tomcat failed to properly parse HTTP trailer headers, leading to the potential for request smuggling when deployed behind a reverse proxy. A maliciously crafted, invalid trailer header could cause Tomcat to process multiple requests from a single one, posing a security risk. It is advised that users upgrade to Tomcat versions 11.0.0-M12, 10.1.14, 9.0.81, or 8.5.94 to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.