URL Redirection to Untrusted Site ('Open Redirect')
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in "FORM" authentication feature Apache Tomcat. This issue affects Apache Tomcat versions 8.5.0 through 8.5.92, 9.0.0.M1 through 9.0.79, 10.1.0-M1 through 10.1.12, and 11.0.0-M1 through 11.0.0-M10. The vulnerability is limited to the ROOT (default) web application.
CWE-601 - Open Redirect
An open redirect attack employs a URL parameter, HTML refresh tags, or a DOM based location change to exploit the trust of a vulnerable domain to direct the users to a malicious website. The attack could lead to higher severity vulnerabilities such as unauthorized access control, account takeover, XSS, and more.