Maven/org.apache.tomcat:tomcat-coyote CVE-2023-46589: high 7.5, EPSS 2.65%

Apache Tomcat Improper Input Validation vulnerability

Action: Upgrade org.apache.tomcat:tomcat-coyote to 11.0.0-M11 or later.

Affected

Fixed versions

Sources

• osv: GHSA-fccv-jmmp-qg76#Maven/org.apache.tomcat:tomcat-coyote
• https://nvd.nist.gov/vuln/detail/CVE-2023-46589
• https://github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041b
• https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd
• https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642
• https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08
• https://github.com/apache/tomcat
• https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr
• https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html
• https://security.netapp.com/advisory/ntap-20231214-0009
• https://tomcat.apache.org/security-10.html
• https://tomcat.apache.org/security-11.html
• https://tomcat.apache.org/security-8.html
• https://tomcat.apache.org/security-9.html
• https://www.openwall.com/lists/oss-security/2023/11/28/2
• http://www.openwall.com/lists/oss-security/2023/11/28/2

CVE-2023-46589 · published 2023-11-28T18:30:23Z · modified 2026-10-02T20:30:05.627846032Z · JSON