Vulnerabilities > CVE-2023-41080

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

apache

debian

NVD

Published: 2023-08-25

Updated: 2024-11-21

Summary

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Tomcat 11.0.0 Apache Tomcat 10.1.0 Apache Tomcat 10.1.1 Apache Tomcat 10.1.2 Apache Tomcat 10.1.5 Apache Tomcat 10.1.6 Apache Tomcat 10.1.7 Apache Tomcat 10.1.8 Apache Tomcat 10.1.9 Apache Tomcat 10.1.10 Apache Tomcat 10.1.11 Apache Tomcat 10.1.12 Apache Tomcat 8.5.0 Apache Tomcat 8.5.1 Apache Tomcat 8.5.2 Apache Tomcat 8.5.3 Apache Tomcat 8.5.4 Apache Tomcat 8.5.5 Apache Tomcat 8.5.6 Apache Tomcat 8.5.7 Apache Tomcat 8.5.8 Apache Tomcat 8.5.9 Apache Tomcat 8.5.10 Apache Tomcat 8.5.11 Apache Tomcat 8.5.12 Apache Tomcat 8.5.13 Apache Tomcat 8.5.14 Apache Tomcat 8.5.15 Apache Tomcat 8.5.16 Apache Tomcat 8.5.17 Apache Tomcat 8.5.18 Apache Tomcat 8.5.19 Apache Tomcat 8.5.20 Apache Tomcat 8.5.21 Apache Tomcat 8.5.22 Apache Tomcat 8.5.23 Apache Tomcat 8.5.24 Apache Tomcat 8.5.25 Apache Tomcat 8.5.26 Apache Tomcat 8.5.27 Apache Tomcat 8.5.28 Apache Tomcat 8.5.29 Apache Tomcat 8.5.30 Apache Tomcat 8.5.31 Apache Tomcat 8.5.32 Apache Tomcat 8.5.33 Apache Tomcat 8.5.34 Apache Tomcat 8.5.35 Apache Tomcat 8.5.36 Apache Tomcat 8.5.37 Apache Tomcat 8.5.38 Apache Tomcat 8.5.39 Apache Tomcat 8.5.40 Apache Tomcat 8.5.41 Apache Tomcat 8.5.42 Apache Tomcat 8.5.43 Apache Tomcat 8.5.44 Apache Tomcat 8.5.45 Apache Tomcat 8.5.46 Apache Tomcat 8.5.47 Apache Tomcat 8.5.48 Apache Tomcat 8.5.49 Apache Tomcat 8.5.50 Apache Tomcat 8.5.51 Apache Tomcat 8.5.52 Apache Tomcat 8.5.53 Apache Tomcat 8.5.54 Apache Tomcat 8.5.55 Apache Tomcat 8.5.56 Apache Tomcat 8.5.57 Apache Tomcat 8.5.58 Apache Tomcat 8.5.59 Apache Tomcat 8.5.60 Apache Tomcat 8.5.61 Apache Tomcat 8.5.62 Apache Tomcat 8.5.63 Apache Tomcat 8.5.64 Apache Tomcat 8.5.65 Apache Tomcat 8.5.66 Apache Tomcat 8.5.67 Apache Tomcat 8.5.68 Apache Tomcat 8.5.69 Apache Tomcat 8.5.70 Apache Tomcat 8.5.71 Apache Tomcat 8.5.72 Apache Tomcat 8.5.73 Apache Tomcat 8.5.74 Apache Tomcat 8.5.75 Apache Tomcat 8.5.76 Apache Tomcat 8.5.77 Apache Tomcat 8.5.78 Apache Tomcat 8.5.79 Apache Tomcat 8.5.80 Apache Tomcat 8.5.81 Apache Tomcat 8.5.82 Apache Tomcat 8.5.83 Apache Tomcat 8.5.84 Apache Tomcat 8.5.85 Apache Tomcat 8.5.86 Apache Tomcat 8.5.87 Apache Tomcat 8.5.88 Apache Tomcat 8.5.89 Apache Tomcat 8.5.90 Apache Tomcat 8.5.91 Apache Tomcat 8.5.92 Apache Tomcat 9.0.0 Apache Tomcat 9.0.1 Apache Tomcat 9.0.2 Apache Tomcat 9.0.3 Apache Tomcat 9.0.4 Apache Tomcat 9.0.5 Apache Tomcat 9.0.6 Apache Tomcat 9.0.7 Apache Tomcat 9.0.8 Apache Tomcat 9.0.9 Apache Tomcat 9.0.10 Apache Tomcat 9.0.11 Apache Tomcat 9.0.12 Apache Tomcat 9.0.13 Apache Tomcat 9.0.14 Apache Tomcat 9.0.15 Apache Tomcat 9.0.16 Apache Tomcat 9.0.17 Apache Tomcat 9.0.18 Apache Tomcat 9.0.19 Apache Tomcat 9.0.20 Apache Tomcat 9.0.21 Apache Tomcat 9.0.22 Apache Tomcat 9.0.23 Apache Tomcat 9.0.24 Apache Tomcat 9.0.25 Apache Tomcat 9.0.26 Apache Tomcat 9.0.27 Apache Tomcat 9.0.28 Apache Tomcat 9.0.29 Apache Tomcat 9.0.30 Apache Tomcat 9.0.31 Apache Tomcat 9.0.32 Apache Tomcat 9.0.33 Apache Tomcat 9.0.34 Apache Tomcat 9.0.35 Apache Tomcat 9.0.35-3.39.1 Apache Tomcat 9.0.35-3.57.3 Apache Tomcat 9.0.36 Apache Tomcat 9.0.37 Apache Tomcat 9.0.38 Apache Tomcat 9.0.39 Apache Tomcat 9.0.40 Apache Tomcat 9.0.41 Apache Tomcat 9.0.42 Apache Tomcat 9.0.43 Apache Tomcat 9.0.44 Apache Tomcat 9.0.45 Apache Tomcat 9.0.46 Apache Tomcat 9.0.47 Apache Tomcat 9.0.48 Apache Tomcat 9.0.49 Apache Tomcat 9.0.50 Apache Tomcat 9.0.51 Apache Tomcat 9.0.52 Apache Tomcat 9.0.53 Apache Tomcat 9.0.54 Apache Tomcat 9.0.55 Apache Tomcat 9.0.56 Apache Tomcat 9.0.57 Apache Tomcat 9.0.58 Apache Tomcat 9.0.59 Apache Tomcat 9.0.60 Apache Tomcat 9.0.61 Apache Tomcat 9.0.62 Apache Tomcat 9.0.63 Apache Tomcat 9.0.64 Apache Tomcat 9.0.65 Apache Tomcat 9.0.67 Apache Tomcat 9.0.68 Apache Tomcat 9.0.69 Apache Tomcat 9.0.70 Apache Tomcat 9.0.71 Apache Tomcat 9.0.72 Apache Tomcat 9.0.73 Apache Tomcat 9.0.74 Apache Tomcat 9.0.75 Apache Tomcat 9.0.76 Apache Tomcat 9.0.77 Apache Tomcat 9.0.78 Apache Tomcat 9.0.79	269
OS	Debian Debian Debian Linux 10.0 Debian Debian Linux 11.0	2

Vulnerabilities > CVE-2023-41080 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2023-41080"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2023-41080