Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-urhs-6aus-syb1
Summary
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.

The vulnerability is limited to the ROOT (default) web application.
Aliases
0
alias CVE-2023-41080
1
alias GHSA-q3mw-pvr8-9ggc
Fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@8.5.93
purl pkg:maven/org.apache.tomcat/tomcat@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.93
1
url pkg:maven/org.apache.tomcat/tomcat@9.0.80
purl pkg:maven/org.apache.tomcat/tomcat@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.80
2
url pkg:maven/org.apache.tomcat/tomcat@10.1.13
purl pkg:maven/org.apache.tomcat/tomcat@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.13
3
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M11
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M11
4
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.93
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.93
5
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.80
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.80
6
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.13
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.13
7
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.93
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.93
8
url pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.80
purl pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.80
9
url pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.13
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.13
10
url pkg:maven/org.apache.tomcat/tomcat-util@8.5.93
purl pkg:maven/org.apache.tomcat/tomcat-util@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@8.5.93
11
url pkg:maven/org.apache.tomcat/tomcat-util@9.0.80
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@9.0.80
12
url pkg:maven/org.apache.tomcat/tomcat-util@10.1.13
purl pkg:maven/org.apache.tomcat/tomcat-util@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@10.1.13
13
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.93
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.93
14
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.80
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.80
15
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.13
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.13
16
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M11
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M11
17
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.93
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.93
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.93
18
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.80
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.80
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.80
19
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.13
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.13
Affected_packages
0
url pkg:maven/org.apache.tomcat/coyote@8.5.0
purl pkg:maven/org.apache.tomcat/coyote@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-h6f2-qgnu-bqf4
1
vulnerability VCID-jsyt-cmxf-gbh3
2
vulnerability VCID-urhs-6aus-syb1
3
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@8.5.0
1
url pkg:maven/org.apache.tomcat/coyote@8.5.92
purl pkg:maven/org.apache.tomcat/coyote@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@8.5.92
2
url pkg:maven/org.apache.tomcat/coyote@9.0.0
purl pkg:maven/org.apache.tomcat/coyote@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-h6f2-qgnu-bqf4
1
vulnerability VCID-jsyt-cmxf-gbh3
2
vulnerability VCID-urhs-6aus-syb1
3
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@9.0.0
3
url pkg:maven/org.apache.tomcat/coyote@9.0.79
purl pkg:maven/org.apache.tomcat/coyote@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@9.0.79
4
url pkg:maven/org.apache.tomcat/coyote@10.1.0
purl pkg:maven/org.apache.tomcat/coyote@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9awt-9zjq-yucn
1
vulnerability VCID-h6f2-qgnu-bqf4
2
vulnerability VCID-jsyt-cmxf-gbh3
3
vulnerability VCID-urhs-6aus-syb1
4
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@10.1.0
5
url pkg:maven/org.apache.tomcat/coyote@10.1.12
purl pkg:maven/org.apache.tomcat/coyote@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@10.1.12
6
url pkg:maven/org.apache.tomcat/coyote@11.0.0
purl pkg:maven/org.apache.tomcat/coyote@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-h6f2-qgnu-bqf4
1
vulnerability VCID-jsyt-cmxf-gbh3
2
vulnerability VCID-urhs-6aus-syb1
3
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@11.0.0
7
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
1
vulnerability VCID-7fh9-36qs-jfg5
2
vulnerability VCID-jzta-navk-87bn
3
vulnerability VCID-kqng-d1f2-myg5
4
vulnerability VCID-rk89-9dw5-w3gg
5
vulnerability VCID-urhs-6aus-syb1
6
vulnerability VCID-xa95-zsnk-3kg9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
8
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.92
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.92
9
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rk89-9dw5-w3gg
1
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0
10
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.79
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.79
11
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0
12
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.12
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.12
13
url pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0
14
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jhm9-cqu3-7yce
1
vulnerability VCID-urhs-6aus-syb1
2
vulnerability VCID-y4a2-mamb-yqg6
3
vulnerability VCID-y9hs-ymcm-3ucx
4
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.0
15
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.92
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.92
16
url pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jhm9-cqu3-7yce
1
vulnerability VCID-urhs-6aus-syb1
2
vulnerability VCID-y4a2-mamb-yqg6
3
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0
17
url pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.79
purl pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.79
18
url pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.0
19
url pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.12
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.12
20
url pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.0
21
url pkg:maven/org.apache.tomcat/tomcat-util@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat-util@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-59dd-qzpt-aucm
2
vulnerability VCID-8xdc-3kn9-b3e6
3
vulnerability VCID-nxb3-55eu-auhp
4
vulnerability VCID-rtmv-qetu-yqfa
5
vulnerability VCID-urhs-6aus-syb1
6
vulnerability VCID-xns8-63b5-guf2
7
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@8.5.0
22
url pkg:maven/org.apache.tomcat/tomcat-util@8.5.92
purl pkg:maven/org.apache.tomcat/tomcat-util@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@8.5.92
23
url pkg:maven/org.apache.tomcat/tomcat-util@9.0.0
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-59dd-qzpt-aucm
1
vulnerability VCID-urhs-6aus-syb1
2
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@9.0.0
24
url pkg:maven/org.apache.tomcat/tomcat-util@9.0.79
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@9.0.79
25
url pkg:maven/org.apache.tomcat/tomcat-util@10.1.0
purl pkg:maven/org.apache.tomcat/tomcat-util@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@10.1.0
26
url pkg:maven/org.apache.tomcat/tomcat-util@10.1.12
purl pkg:maven/org.apache.tomcat/tomcat-util@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@10.1.12
27
url pkg:maven/org.apache.tomcat/tomcat-util@11.0.0
purl pkg:maven/org.apache.tomcat/tomcat-util@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-util@11.0.0
28
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nsr-9s9y-ckft
1
vulnerability VCID-4nx6-t8vd-bqcu
2
vulnerability VCID-axzz-cadr-b7fv
3
vulnerability VCID-dast-z2hv-2yfe
4
vulnerability VCID-dbu6-fhrs-aubn
5
vulnerability VCID-dk58-p9py-rka9
6
vulnerability VCID-gmjm-6ck2-skgu
7
vulnerability VCID-j66a-6et3-mfha
8
vulnerability VCID-kqng-d1f2-myg5
9
vulnerability VCID-paqj-ye46-8bdb
10
vulnerability VCID-qth9-7326-hffp
11
vulnerability VCID-rk89-9dw5-w3gg
12
vulnerability VCID-se44-f85s-xyex
13
vulnerability VCID-urhs-6aus-syb1
14
vulnerability VCID-xa95-zsnk-3kg9
15
vulnerability VCID-xns8-63b5-guf2
16
vulnerability VCID-y4a2-mamb-yqg6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
29
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j66a-6et3-mfha
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
30
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d8re-94xd-nycp
1
vulnerability VCID-j66a-6et3-mfha
2
vulnerability VCID-kqng-d1f2-myg5
3
vulnerability VCID-paqj-ye46-8bdb
4
vulnerability VCID-urhs-6aus-syb1
5
vulnerability VCID-wcnj-bna8-7fh7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
31
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d8re-94xd-nycp
1
vulnerability VCID-j66a-6et3-mfha
2
vulnerability VCID-kqng-d1f2-myg5
3
vulnerability VCID-paqj-ye46-8bdb
4
vulnerability VCID-urhs-6aus-syb1
5
vulnerability VCID-wcnj-bna8-7fh7
6
vulnerability VCID-y4a2-mamb-yqg6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
32
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.0
33
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.92
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.92
34
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.0
35
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.79
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.79
36
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.0
37
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.12
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.12
38
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
39
url pkg:maven/tomcat/catalina@8.5.0
purl pkg:maven/tomcat/catalina@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@8.5.0
40
url pkg:maven/tomcat/catalina@8.5.92
purl pkg:maven/tomcat/catalina@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@8.5.92
41
url pkg:maven/tomcat/catalina@9.0.0
purl pkg:maven/tomcat/catalina@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@9.0.0
42
url pkg:maven/tomcat/catalina@9.0.79
purl pkg:maven/tomcat/catalina@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@9.0.79
43
url pkg:maven/tomcat/catalina@10.1.0
purl pkg:maven/tomcat/catalina@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@10.1.0
44
url pkg:maven/tomcat/catalina@10.1.12
purl pkg:maven/tomcat/catalina@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@10.1.12
45
url pkg:maven/tomcat/catalina@11.0.0
purl pkg:maven/tomcat/catalina@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/catalina@11.0.0
46
url pkg:maven/tomcat/jasper-runtime@8.5.0
purl pkg:maven/tomcat/jasper-runtime@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@8.5.0
47
url pkg:maven/tomcat/jasper-runtime@8.5.92
purl pkg:maven/tomcat/jasper-runtime@8.5.92
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@8.5.92
48
url pkg:maven/tomcat/jasper-runtime@9.0.0
purl pkg:maven/tomcat/jasper-runtime@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@9.0.0
49
url pkg:maven/tomcat/jasper-runtime@9.0.79
purl pkg:maven/tomcat/jasper-runtime@9.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@9.0.79
50
url pkg:maven/tomcat/jasper-runtime@10.1.0
purl pkg:maven/tomcat/jasper-runtime@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@10.1.0
51
url pkg:maven/tomcat/jasper-runtime@10.1.12
purl pkg:maven/tomcat/jasper-runtime@10.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@10.1.12
52
url pkg:maven/tomcat/jasper-runtime@11.0.0
purl pkg:maven/tomcat/jasper-runtime@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-urhs-6aus-syb1
1
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/tomcat/jasper-runtime@11.0.0
References
0
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
url https://github.com/apache/tomcat
1
reference_url https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
2
reference_url https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
3
reference_url https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
4
reference_url https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
5
reference_url https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
reference_id
reference_type
scores
url https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
6
reference_url https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
7
reference_url https://security.netapp.com/advisory/ntap-20230921-0006
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20230921-0006
8
reference_url https://www.debian.org/security/2023/dsa-5521
reference_id
reference_type
scores
url https://www.debian.org/security/2023/dsa-5521
9
reference_url https://www.debian.org/security/2023/dsa-5522
reference_id
reference_type
scores
url https://www.debian.org/security/2023/dsa-5522
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-41080
reference_id CVE-2023-41080
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-41080
11
reference_url https://github.com/advisories/GHSA-q3mw-pvr8-9ggc
reference_id GHSA-q3mw-pvr8-9ggc
reference_type
scores
url https://github.com/advisories/GHSA-q3mw-pvr8-9ggc
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 601
name URL Redirection to Untrusted Site ('Open Redirect')
description A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-urhs-6aus-syb1