UpHeron
All vulnerabilities

Servers and applications

CVE-2023-41080

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.

Severity
Medium 6.1
Published
25 Aug 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • Version 11.0.0-milestone10
  • Version 11.0.0-milestone9
  • Version 11.0.0-milestone8
  • Version 11.0.0-milestone7
All 13 release lines
  • From 8.5.0 up to 8.5.92
  • From 9.0.0 up to 9.0.79
  • From 10.1.0 up to 10.1.12
  • Version 11.0.0-milestone1
  • Version 11.0.0-milestone2
  • Version 11.0.0-milestone3
  • Version 11.0.0-milestone4
  • Version 11.0.0-milestone5
  • Version 11.0.0-milestone6
  • Version 11.0.0-milestone7
  • Version 11.0.0-milestone8
  • Version 11.0.0-milestone9
  • Version 11.0.0-milestone10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-41080
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-41080