CVE-2018-11784: Vulnerability in org.apache.tomcat.embed:tomcat-embed-core
Summary
CVE-2018-11784: Apache Tomcat Open Redirect vulnerability. Affects org.apache.tomcat.embed:tomcat-embed-core across 3 version ranges.
>= 7.0.23, < 7.0.91
>= 8.5.0, < 8.5.34
>= 9.0.0, < 9.0.12
Fixed in 7.0.91, 8.5.34 or 9.0.12, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
org.apache.tomcat.embed:tomcat-embed-core is a Maven package that provides embedded Tomcat functionality. It allows developers to run a Tomcat server within their application. This package is vulnerable to a moderate severity vulnerability.
Vulnerability Detail
The vulnerability affects Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33, and 7.0.23 to 7.0.90. When the default servlet in Apache Tomcat returns a redirect to a directory, a specially crafted URL can be used to cause the redirect to be generated to any URI of the attacker's choice. This can potentially lead to unauthorized access or information disclosure.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 7.0.23, < 7.0.917.0.91 -
>= 8.5.0, < 8.5.348.5.34 -
>= 9.0.0, < 9.0.129.0.12
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
In conclusion, org.apache.tomcat.embed:tomcat-embed-core is vulnerable to a moderate severity vulnerability that allows an attacker to redirect the default servlet to any URI of their choice. It is recommended to upgrade to the fixed versions mentioned above. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.tomcat.embed:tomcat-embed-core →
FAQ
This vulnerability allows an attacker to redirect the default servlet to any URI of their choice, potentially leading to unauthorized access or information disclosure.
Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33, and 7.0.23 to 7.0.90 are affected.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your pom.xml file and Vulert will analyze it in real-time.
No, there are no known workarounds for this vulnerability.
The severity of this vulnerability is moderate, with a CVSS score of 4.3.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.tomcat.embed:tomcat-embed-core.
