🔴 《严重安全漏洞：CVE-2026-59083》

CVSS 评分: 严重（9.1）　　状态: Analyzed　　发布时间: 2026-07-14

漏洞描述

Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected.

Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.

🔍 技术细节

字段 值
CVE ID CVE-2026-59083
CVSS 评分 9.1 🔴
严重程度 严重
CVSS 向量 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE 分类 CWE-177
发布时间 2026-07-14
最后更新 2026-07-14
状态 Analyzed
数据来源 security@apache.org

🔗 参考链接