Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
Next non-vulnerable version 11.0.1
Latest non-vulnerable version 11.0.1
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-e318-2aad-aaag
Aliases:
CVE-2023-41080
GHSA-q3mw-pvr8-9ggc
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.
11.0.1
Affected by 0 other vulnerabilities.
VCID-pcvp-wv2z-aaas
Aliases:
CVE-2023-46589
GHSA-fccv-jmmp-qg76
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
11.0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:48:39.172298+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 36.1.3
2025-06-20T16:40:59.586396+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.3
2025-06-20T16:40:55.376327+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 36.1.3
2025-06-03T23:26:14.722175+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 36.1.0
2025-06-03T23:19:36.597390+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.0
2025-06-03T23:19:32.911311+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 36.1.0
2025-06-02T23:23:49.551241+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 36.1.2
2025-06-02T23:16:41.585240+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.2
2025-06-02T23:16:37.661451+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 36.1.2
2025-04-03T21:46:39.065826+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 36.0.0
2025-04-03T21:31:20.913880+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.0.0
2025-04-03T21:31:10.657215+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 36.0.0
2025-02-18T01:05:27.971746+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 35.1.0
2025-02-18T01:04:28.796130+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 35.1.0
2025-02-18T01:04:23.480631+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 35.1.0
2024-11-20T23:30:41.079205+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 35.0.0
2024-11-20T23:30:13.611456+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 35.0.0
2024-11-18T23:19:33.318723+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 34.3.2
2024-11-18T23:18:59.629190+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 34.3.2
2024-10-17T03:54:50.959292+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 34.0.2
2024-10-17T03:54:27.741379+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 34.0.2
2024-09-17T22:40:40.950257+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 34.0.1
2024-09-17T22:40:40.657521+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 34.0.1
2024-01-03T18:03:04.490839+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-46589.yml 34.0.0rc1
2024-01-03T18:03:04.169542+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-websocket/CVE-2023-41080.yml 34.0.0rc1