CVE-2026-59083 — Improper Handling of URL Encoding (Hex Encoding)...
CVE-2026-59083 漏洞深度分析
漏洞概述
CVE 编号： CVE-2026-59083
CVSS 评分： 9.1（CRITICAL）
CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE 分类： CWE-177
漏洞状态： Received
发布时间： 2026-07-14T09:16:41.483
最后更新： 2026-07-14T13:19:00.387
漏洞描述
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected.
Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.
影响分析
此漏洞的具体影响取决于实际利用场景。"
修复建议
- 及时关注厂商发布的安全更新和补丁
- 升级受影响组件到最新版本
- 如无法立即升级，参考厂商提供的临时缓解措施
- 加强网络访问控制和监控
参考链接
💬 评论