{"id":"CVE-2023-41080","published":"2023-08-25T20:39:36Z","modified":"2025-10-29T12:04:40Z","title":"Apache Tomcat: Open redirect with FORM authentication","vendor":"Apache","product":"Apache Tomcat","tier":"tail","description":{"text":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.\nOlder, EOL versions may also be affected.\n\n\nThe vulnerability is limited to the ROOT (default) web application.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.06459,"percentile":0.93711,"provenance":"source"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"}],"references":[{"url":"https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230921-0006/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5522","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5521","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","tags":["x_transferred"]}],"priority":{"score":23.7,"factors":[{"name":"EPSS percentile","points":18.74},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2023-08-26","earliestUrl":"https://github.com/sotiak/CVE-2023-41080","repos":[{"name":"sotiak/CVE-2023-41080","url":"https://github.com/sotiak/CVE-2023-41080","stars":11,"created":"2023-08-26"}]},"first":{"date":"2023-08-26","source":"PoC-in-GitHub","url":"https://github.com/sotiak/CVE-2023-41080"},"provenance":"source"},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Tomcat","versions":[">= 11.0.0-M1, <= 11.0.0-M10",">= 10.1.0-M1, <= 10.0.12",">= 9.0.0-M1, <= 9.0.79",">= 8.5.0, <= 8.5.92"]}],"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=11.0.0-M1, <11.0.0-M11",">=10.1.0-M1, <10.1.13",">=9.0.0-M1, <9.0.80",">=8.5.0, <8.5.93"],"patched":["11.0.0-M11","10.1.13","9.0.80","8.5.93"],"from":["GHSA-q3mw-pvr8-9ggc"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.tomcat.embed:tomcat-embed-core","vulnerableRanges":[">=8.5.0, <8.5.93",">=9.0.0-M1, <9.0.80",">=10.1.0-M1, <10.1.13",">=11.0.0-M1, <11.0.0-M11"],"patched":["8.5.93","9.0.80","10.1.13","11.0.0-M11"],"from":["GHSA-q3mw-pvr8-9ggc"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat-catalina","vulnerableRanges":[">=10.1.0-M1, <10.1.13",">=9.0.0-M1, <9.0.80",">=8.5.0, <8.5.93"],"patched":["10.1.13","9.0.80","8.5.93"],"from":["GHSA-q3mw-pvr8-9ggc"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-2335","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2022-29885","published":"2022-05-12","fixed":"10.1.0-M15","kev":false},{"cve":"CVE-2022-34305","published":"2022-06-23","fixed":"10.1.0-M17","kev":false,"link":{"from":"CVE-2022-34305","to":"CVE-2023-41080","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"9.0.65","toFixed":"9.0.80","daysApart":428},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"8.5.82","toFixed":"8.5.93","daysApart":428}]}},{"cve":"CVE-2021-42340","published":"2021-10-14","fixed":"10.1.0-M6","kev":false,"link":{"from":"CVE-2021-42340","to":"CVE-2023-41080","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"10.1.0-M6","toFixed":"10.1.13","daysApart":680}]}},{"cve":"CVE-2023-41080","published":"2023-08-25","fixed":"11.0.0-M11","kev":false},{"cve":"CVE-2023-42795","published":"2023-10-10","fixed":"11.0.0-M12","kev":false,"link":{"from":"CVE-2023-41080","to":"CVE-2023-42795","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"9.0.80","toFixed":"9.0.81","daysApart":46},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"8.5.93","toFixed":"8.5.94","daysApart":46}]}},{"cve":"CVE-2023-45648","published":"2023-10-10","fixed":"11.0.0-M12","kev":false,"link":{"from":"CVE-2023-41080","to":"CVE-2023-45648","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"9.0.80","toFixed":"9.0.81","daysApart":46},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"8.5.93","toFixed":"8.5.94","daysApart":46}]}},{"cve":"CVE-2024-52318","published":"2024-11-18","fixed":"11.0.1","kev":false}],"package":"Maven:org.apache.tomcat:tomcat"}}