Maven/org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080: medium 6.1, EPSS 6.46%

Apache Tomcat Open Redirect vulnerability

Action: Upgrade org.apache.tomcat.embed:tomcat-embed-core to 8.5.93 (8.x), 9.0.80 (9.x), 10.1.13 (10.x) or 11.0.0-M11 (11.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-q3mw-pvr8-9ggc#Maven/org.apache.tomcat.embed:tomcat-embed-core
• https://nvd.nist.gov/vuln/detail/CVE-2023-41080
• https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
• https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
• https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
• https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
• https://github.com/apache/tomcat
• https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
• https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
• https://security.netapp.com/advisory/ntap-20230921-0006
• https://www.debian.org/security/2023/dsa-5521
• https://www.debian.org/security/2023/dsa-5522

CVE-2023-41080 · published 2023-08-25T21:30:48Z · modified 2026-09-10T03:50:03.488136490Z · JSON