CVE-2023-41080
3 advisories.
Maven/org.apache.tomcat:tomcat CVE-2023-41080: medium 6.1
Apache Tomcat Open Redirect vulnerability
Action: Upgrade org.apache.tomcat:tomcat to 8.5.93 (8.x), 9.0.80 (9.x), 10.1.13 (10.x) or 11.0.0-M11 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0-M1 | 11.0.0-M11 | - |
| 10.1.0-M1 | 10.1.13 | - |
| 9.0.0-M1 | 9.0.80 | - |
| 8.5.0 | 8.5.93 | - |
Fixed versions
| 11.0.0-M11 | 10.1.13 | 9.0.80 | 8.5.93 |
Sources
- osv: GHSA-q3mw-pvr8-9ggc
- https://nvd.nist.gov/vuln/detail/CVE-2023-41080
- https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
- https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
- https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
- https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- https://security.netapp.com/advisory/ntap-20230921-0006
- https://www.debian.org/security/2023/dsa-5521
- https://www.debian.org/security/2023/dsa-5522
CVE-2023-41080 · published · modified · JSON
Maven/org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080: medium 6.1
Apache Tomcat Open Redirect vulnerability
Action: Upgrade org.apache.tomcat.embed:tomcat-embed-core to 8.5.93 (8.x), 9.0.80 (9.x), 10.1.13 (10.x) or 11.0.0-M11 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.5.0 | 8.5.93 | - |
| 9.0.0-M1 | 9.0.80 | - |
| 10.1.0-M1 | 10.1.13 | - |
| 11.0.0-M1 | 11.0.0-M11 | - |
Fixed versions
| 8.5.93 | 9.0.80 | 10.1.13 | 11.0.0-M11 |
Sources
- osv: GHSA-q3mw-pvr8-9ggc#Maven/org.apache.tomcat.embed:tomcat-embed-core
- https://nvd.nist.gov/vuln/detail/CVE-2023-41080
- https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
- https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
- https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
- https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- https://security.netapp.com/advisory/ntap-20230921-0006
- https://www.debian.org/security/2023/dsa-5521
- https://www.debian.org/security/2023/dsa-5522
CVE-2023-41080 · published · modified · JSON
Maven/org.apache.tomcat:tomcat-catalina CVE-2023-41080: medium 6.1
Apache Tomcat Open Redirect vulnerability
Action: Upgrade org.apache.tomcat:tomcat-catalina to 8.5.93 (8.x), 9.0.80 (9.x) or 10.1.13 (10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.1.0-M1 | 10.1.13 | - |
| 9.0.0-M1 | 9.0.80 | - |
| 8.5.0 | 8.5.93 | - |
Fixed versions
| 10.1.13 | 9.0.80 | 8.5.93 |
Sources
- osv: GHSA-q3mw-pvr8-9ggc#Maven/org.apache.tomcat:tomcat-catalina
- https://nvd.nist.gov/vuln/detail/CVE-2023-41080
- https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
- https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
- https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
- https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- https://security.netapp.com/advisory/ntap-20230921-0006
- https://www.debian.org/security/2023/dsa-5521
- https://www.debian.org/security/2023/dsa-5522
CVE-2023-41080 · published · modified · JSON