发布时间: 2023年9月15日
修改时间: 2024年10月31日
URL Redirection to Untrusted Site ( Open Redirect ) vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.The vulnerability is limited to the ROOT (default) web application.
| NVD | openEuler | |
|---|---|---|
| Confidentiality | Low | Low |
| Attack Vector | Network | Network |
| CVSS评分 | 6.1 | 6.1 |
| Attack Complexity | Low | Low |
| Privileges Required | None | None |
| Scope | Changed | Changed |
| Integrity | Low | Low |
| User Interaction | Required | Required |
| Availability | None | None |
| 公告名 | 概要 | 发布时间 |
|---|---|---|
| KylinSec-SA-2023-1696 | tomcat security update | 2023年9月15日 |
| 产品 | 包 | 状态 |
|---|---|---|
| KY3.4-4A | tomcat | Fixed |
| KY3.4-5A | tomcat | Fixed |
| KY3.5.1 | tomcat | Fixed |
| KY3.5.2 | tomcat | Fixed |
