CVE-2023-41080CWE-601

Apache Tomcat: Open redirect with FORM authentication

published August 25, 2023

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.

Older, EOL versions may also be affected.

The vulnerability is limited to the ROOT (default) web application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06459 · 93.7th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-08-25T20:39Z
EPSS history
Timeline
  • 25 AUG 20:39Z
    Apache Tomcat: Open redirect with FORM authentication
    cvelistv5