cve/2023/CVE-2023-41080.md

### [CVE-2023-41080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41080)
![](https://img.shields.io/static/v1?label=Product&message=Apache%20Tomcat&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=11.0.0-M1%3C%3D%2011.0.0-M10%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-601%20URL%20Redirection%20to%20Untrusted%20Site%20('Open%20Redirect')&color=brighgreen)

### Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.The vulnerability is limited to the ROOT (default) web application.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/muneebaashiq/MBProjects
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/seal-community/patches
- https://github.com/shiomiyan/CVE-2023-41080