GitHub Advisoryadvisory · Maven

GHSA-5q99-f34m-67gc Apache Tomcat Open Redirect vulnerability

MEDIUM Published 2018-10-17 Modified 2024-02-22 Official page ↗
Aliases
CVE-2018-11784
Ecosystem
Maven
Packages
org.apache.tomcat.embed:tomcat-embed-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-601
Reviewed
2020-06-16

Affected packages

• Maven org.apache.tomcat.embed:tomcat-embed-core: >= 8.5.0, < 8.5.34 → fixed in 8.5.34 • Maven org.apache.tomcat.embed:tomcat-embed-core: >= 7.0.23, < 7.0.91 → fixed in 7.0.91 • Maven org.apache.tomcat.embed:tomcat-embed-core: >= 9.0.0, < 9.0.12 → fixed in 9.0.12

Description

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

Related

Alias · CVE (1)

  • CVE-2018-11784 When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References