CVE-2018-11784
MEDIUM 4.3EPSS 97.7%
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
- Affected
- Apache Software Foundation · Apache Tomcat
- CVSS v3.0 NVD
- 4.3 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 97.68% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- medium · CWE-601
- Published
- 2018-10-04
- Updated
- 2026-10-15
Proof-of-concept exploits (1)
- Cappricio-Securities/CVE-2018-117840★ · 2024-06-24
Nuclei templates (1)
ExploitDB entries (1)
Security advisories
- http://www.securityfocus.com/bid/105524
- https://access.redhat.com/errata/RHSA-2019:0130
- https://access.redhat.com/errata/RHSA-2019:0131
- https://access.redhat.com/errata/RHSA-2019:0485
- https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html
- https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html
- https://security.netapp.com/advisory/ntap-20181014-0002
- https://usn.ubuntu.com/3787-1
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- advisories/GHSA-5q99-f34m-67gc
- https://kc.mcafee.com/corporate/index?page=content&id=SB10284
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html