CVE-2023-41080
published 2023-08-25CVE-2023-41080: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1…
PriorityP336medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
5.97%
92.5th percentile
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.
Older, EOL versions may also be affected.
The vulnerability is limited to the ROOT (default) web application.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | 10.1.0 – 10.1.12 | — |
| apache | tomcat | 8.5.0 – 8.5.92 | — |
| apache | tomcat | 9.0.0 – 9.0.79 | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | tomcat10 | < tomcat10 10.1.6-1+deb12u1 (bookworm) | tomcat10 10.1.6-1+deb12u1 (bookworm) |
| debian | tomcat9 | < tomcat10 10.1.6-1+deb12u1 (bookworm) | tomcat10 10.1.6-1+deb12u1 (bookworm) |
| eclipse | glassfish | >= 5.1.0 < 7.0.10 | 7.0.10 |
| eclipse_foundation | eclipse_glassfish | >= 5.1.0 < 7.0.10 | 7.0.10 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ghsa6.1MEDIUM
osv6.1MEDIUM
cisa9.8CRITICAL
vendor_apache6.1MEDIUM
vendor_debian6.1MEDIUM
vendor_oracle6.1MEDIUM
vendor_redhat6.1MEDIUM
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
tomcat9 vulnerabilities
osv·2024-11-13·CVSS 4.3
CVE-2023-28708 [MEDIUM] tomcat9 vulnerabilities
tomcat9 vulnerabilities
It was discovered that Tomcat did not include the secure attribute for
session cookies when using the RemoteIpFilter with requests from a
reverse proxy. An attacker could possibly use this issue to leak
sensitive information. (CVE-2023-28708)
It was discovered that Tomcat had a vulnerability in its FORM
authentication feature, leading to an open redirect attack. An attacker
could possibly use this issue to perform phishing attacks. (CVE-2023-41080)
It was discovered that Tomcat incorrectly recycled certain objects,
which could lead to information leaking from one request to the next.
An attacker could potentially use this issue to leak sensitive
information. (CVE-2023-42795)
It was discovered that Tomcat incorrectly handled HTTP trailer headers. A
remote attacke
OSV
Eclipse Glassfish URL redirection vulnerability
osv·2024-09-11·CVSS 6.1
CVE-2024-8646 [MEDIUM] Eclipse Glassfish URL redirection vulnerability
Eclipse Glassfish URL redirection vulnerability
In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed.
This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish.
This vulnerability only affects applications that are explicitly deployed to the root context ('/').
GHSA
Eclipse Glassfish URL redirection vulnerability
ghsa·2024-09-11·CVSS 6.1
CVE-2024-8646 [MEDIUM] CWE-601 Eclipse Glassfish URL redirection vulnerability
Eclipse Glassfish URL redirection vulnerability
In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed.
This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish.
This vulnerability only affects applications that are explicitly deployed to the root context ('/').
OSV
CVE-2023-41080: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat
osv·2023-08-25·CVSS 6.1
CVE-2023-41080 [MEDIUM] CVE-2023-41080: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.
OSV
Apache Tomcat Open Redirect vulnerability
osv·2023-08-25
CVE-2023-41080 [MEDIUM] Apache Tomcat Open Redirect vulnerability
Apache Tomcat Open Redirect vulnerability
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.
GHSA
Apache Tomcat Open Redirect vulnerability
ghsa·2023-08-25
CVE-2023-41080 [MEDIUM] CWE-601 Apache Tomcat Open Redirect vulnerability
Apache Tomcat Open Redirect vulnerability
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.
Ubuntu
Tomcat vulnerabilities
vendor_ubuntu·2024-11-13·CVSS 4.3
CVE-2023-45648 [MEDIUM] Tomcat vulnerabilities
Title: Tomcat vulnerabilities
Summary: Several security issues were fixed in Tomcat.
It was discovered that Tomcat did not include the secure attribute for
session cookies when using the RemoteIpFilter with requests from a
reverse proxy. An attacker could possibly use this issue to leak
sensitive information. (CVE-2023-28708)
It was discovered that Tomcat had a vulnerability in its FORM
authentication feature, leading to an open redirect attack. An attacker
could possibly use this issue to perform phishing attacks. (CVE-2023-41080)
It was discovered that Tomcat incorrectly recycled certain objects,
which could lead to information leaking from one request to the next.
An attacker could potentially use this issue to leak sensitive
information. (CVE-2023-42795)
It was discovered that Tom
Oracle
Oracle Oracle Commerce Risk Matrix: Workbench (Apache Tomcat) — CVE-2023-41080
vendor_oracle·2024-04-15·CVSS 6.1
CVE-2023-41080 [MEDIUM] Oracle Oracle Commerce Risk Matrix: Workbench (Apache Tomcat) — CVE-2023-41080
Oracle Oracle Commerce Risk Matrix: Workbench (Apache Tomcat) vulnerability
CVE: CVE-2023-41080
CVSS: 6.1
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
CISA ICS
Siemens SINEC NMS
cisa_ics·2024-02-15
Siemens SINEC NMS
ICS Advisory
##
Siemens SINEC NMS
Release DateFebruary 15, 2024
Alert CodeICSA-24-046-15
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEC NMS
- Vulnerabilities: Out-of-bounds Read, Inadequate Encryption Strength, Double Free, Use After Free, NULL Pointer Dereference, Improper Input Validation, Missing Encryption of Sensitive Data, Allocation of Resources Wit
Oracle
Oracle Oracle Communications Risk Matrix: BEServer (Apache Tomcat) — CVE-2023-41080
vendor_oracle·2023-10-15·CVSS 6.1
CVE-2023-41080 [MEDIUM] Oracle Oracle Communications Risk Matrix: BEServer (Apache Tomcat) — CVE-2023-41080
Oracle Oracle Communications Risk Matrix: BEServer (Apache Tomcat) vulnerability
CVE: CVE-2023-41080
CVSS: 6.1
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2023 (OCT 2023)
Red Hat
tomcat: Open Redirect vulnerability in FORM authentication
vendor_redhat·2023-08-28·CVSS 6.1
CVE-2023-41080 [MEDIUM] CWE-601 tomcat: Open Redirect vulnerability in FORM authentication
tomcat: Open Redirect vulnerability in FORM authentication
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.
Older, EOL versions may also be affected.
The vulnerability is limited to the ROOT (default) web application.
A flaw was found in Apache Tomcat if the default web application is configured with FormAuthenticator. This issue allows a specially crafted URL to trigger a redirect to an arbitrary URL.
Statement: The pki-servlet-engine package has been obsoleted by the Tomcat package. Therefore, this issue will be fixed in the Tomcat package rather than the pki-serlve
CISA
Microsoft Exchange Server Privilege Escalation Vulnerability
cisa·2023-01-10·CVSS 9.8
CVE-2022-41080 [HIGH] Microsoft Exchange Server Privilege Escalation Vulnerability
Vulnerability: Microsoft Exchange Server Privilege Escalation Vulnerability
Affected: Microsoft Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
Required Action: Apply updates per vendor instructions.
Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080; https://nvd.nist.gov/vuln/detail/CVE-2022-41080
Remediation Due Date: 2023-01-31
Debian
CVE-2023-41080: tomcat10 - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authen...
vendor_debian·2023·CVSS 6.1
CVE-2023-41080 [MEDIUM] CVE-2023-41080: tomcat10 - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authen...
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.
Scope: local
bookworm: resolved (fixed in 10.1.6-1+deb12u1)
forky: resolved (fixed in 10.1.13-1)
sid: resolved (fixed in 10.1.13-1)
trixie: resolved (fixed in 10.1.13-1)
Apache
Apache tomcat: CVE-2023-41080
vendor_apache·CVSS 6.1
CVE-2023-41080 [MEDIUM] Apache tomcat: CVE-2023-41080
Apache tomcat: CVE-2023-41080
If the ROOT (default) web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger a redirect to an URL of the attackers choice. This was fixed with commit 4998ad74 . This issue was reported to the Tomcat Security Team on 17 August 2023. The issue was made public on 22 August 2023. Affects: 8.5.0 to 8.5.92 2023-05-19 Fixed in Apache Tomcat 8.5.89 Important: Information disclosure
No detection rules found.
No public exploits indexed.
arXiv
VulRG: Multi-Level Explainable Vulnerability Patch Ranking for Complex Systems Using Graphs
arxiv_fulltext·2025-02-16
VulRG: Multi-Level Explainable Vulnerability Patch Ranking for Complex Systems Using Graphs
VulRG: Multi-Level Explainable Vulnerability Patch Ranking for Complex Systems Using Graphs
Yuning Jiang
[email protected]
0000-0003-4791-8452
National University of Singapore
Singapore
Nay Oo
[email protected]
NCS Cyber Special Ops R&D
Singapore
Qiaoran Meng
[email protected]
National University of Singapore
Singapore
Hoon Wei Lim
[email protected]
NCS Cyber Special Ops R&D
Singapore
Biplab Sikdar
[email protected]
National University of Singapore
Singapore
Jiang et al.
## Abstract
As interconnected systems proliferate, safeguarding complex infrastructures against an escalating array of cyber threats has become an urgent challenge. The growing number of vulnerabilities, coupled with resource constraints, makes addressing every vulnerability impractical, thereby rende
Bugzilla
CVE-2023-41080 tomcat: Open Redirect vulnerability in FORM authentication
bugzilla·2023-08-28·CVSS 6.1
CVE-2023-41080 [MEDIUM] CVE-2023-41080 tomcat: Open Redirect vulnerability in FORM authentication
CVE-2023-41080 tomcat: Open Redirect vulnerability in FORM authentication
If the ROOT (default) web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger a redirect to an URL of the attackers choice.
https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
https://github.com/advisories/GHSA-q3mw-pvr8-9ggc
Discussion:
Versions Affected:
Tomcat 11.0.0-M1 to 11.0.0-M10
Tomcat 10.1.0-M1 to 10.1.12
Tomcat 9.0.0-M1 to 9.0.79
Tomcat 8.5.0 to 8.5.92
Upstream Commits:
https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b (8.5.93)
https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b (9.0.80)
https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d798
https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2fhttps://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2fhttps://lists.debian.org/debian-lts-announce/2023/10/msg00020.htmlhttps://security.netapp.com/advisory/ntap-20230921-0006/https://www.debian.org/security/2023/dsa-5521https://www.debian.org/security/2023/dsa-5522
2023-08-25
Published