PT-2023-6329
CVE-2023-45648
·
تاريخ النشر
2023-10-10
·
تاريخ التحديث
2026-02-11
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 11.0.0-M1 through 11.0.0-M11
Apache Tomcat versions 10.1.0-M1 through 10.1.13
Apache Tomcat versions 9.0.0-M1 through 9.0.81
Apache Tomcat versions 8.5.0 through 8.5.93
Description
The issue is related to improper input validation in Apache Tomcat, where the server does not correctly parse HTTP trailer headers. A specially crafted, invalid trailer header could cause Tomcat to treat a single request as multiple requests, leading to the possibility of request smuggling when behind a reverse proxy.
Recommendations
Upgrade to version 11.0.0-M12 onwards
Upgrade to version 10.1.14 onwards
Upgrade to version 9.0.81 onwards
Upgrade to version 8.5.94 onwards
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾