[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRk9iWV1gDCh4jCte2NeAdvU7_-MeSjV6mi6ZpTKh_ik":3,"g5a-risk:CVE-2023-28709":174},{"success":4,"data":5,"meta":171},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":51,"references":52,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":26,"otxData":26,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":162,"notableEvents":163},"CVE-2023-28709","What is CVE-2023-28709?","The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP       connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was       submitted that supplied exactly maxParameterCount parameters in the query string, the limit for uploaded request parts could be bypassed with the potential for a denial of service to occur.","The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default H...","2023-05-22T11:15:09.423","2025-02-13T17:16:16.537",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.48031,[29,29,29,29,29,29,29],"High",[33,38,41,46],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":39,"criteria":40,"vulnerable":4},"11.0.0","cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"debian","debian_linux","12.0","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"netapp","7-mode_transition_tool","-","cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",4,[53,59,64,68,72,76,78,80,82,84],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F05\u002F22\u002F1","Openwall",[57,58],"Mailing List","Third Party Advisory",{"url":60,"source":61,"tags":62},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F7wvxonzwb7k9hx9jt3q33cmy7j97jo3j","Apache",[57,63],"Vendor Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202305-37","Gentoo",[58],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230616-0004\u002F","Netapp",[58],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5521","Debian",[58],{"url":54,"source":55,"tags":77},[57,58],{"url":60,"source":61,"tags":79},[57,63],{"url":65,"source":66,"tags":81},[58],{"url":69,"source":70,"tags":83},[58],{"url":73,"source":74,"tags":85},[58],10,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-193","Off-by-one Error","A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.","","Draft","Base","Simple",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2023-28709? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28709, a high severity cyber security vulnerability from 2023. High exploit probability (48.0%). The fix for CVE-2023-2499...","CVE-2023-28709, CVE-2023-28709 vulnerability, CVE-2023-28709 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, apache security, debian security, netapp security, tomcat vulnerability, debian_linux vulnerability, 7-mode_transition_tool vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2023-28709",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28709","Cybersecurity","CVE-2023-28709, CVE-2023-28709 vulnerability, CVE-2023-28709 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,150,156],{"Operator":26,"Negate":26,"Nodes":126},[127],{"Operator":128,"Negate":26,"CPEMatch":129},"OR",[130,134,138,142,144,147],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":26,"VersionEndIncluding":133},"7280B285-9594-4E06-BDAF-AF7731FAEC5B","8.5.85","8.5.87",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":136,"VersionEndExcluding":26,"VersionEndIncluding":137},"47B26F88-1764-45E5-A053-BF5B848074AA","9.0.71","9.0.73",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":140,"VersionEndExcluding":26,"VersionEndIncluding":141},"CC9BAE63-AF35-4BB3-900C-C56653716362","10.1.5","10.1.7",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2AAD52CE-94F5-4F98-A027-9A7E68818CB6",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:11.0.0:milestone3:*:*:*:*:*:*","F1F981F5-035A-4EDD-8A9F-481EE8BC7FF7",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:11.0.0:milestone4:*:*:*:*:*:*","03A171AF-2EC8-4422-912C-547CDB58CAAA",{"Operator":26,"Negate":26,"Nodes":151},[152],{"Operator":128,"Negate":26,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"46D69DCC-AE4D-4EA5-861C-D60951444C6C",{"Operator":26,"Negate":26,"Nodes":157},[158],{"Operator":128,"Negate":26,"CPEMatch":159},[160],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7EF6650C-558D-45C8-AE7D-136EE70CB6D7",[],[164],{"id":165,"eventType":166,"eventTime":167,"details":168,"label":169,"color":170},"e3eab54f-976e-43f7-a685-2cf6044ed464","HIGH_EPSS_DELTA","2026-06-16T04:05:08.141775+00:00","Daily EPSS score increased by 0.510 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":172,"version":173},1792239722805,"2.0",{"score":175,"band":176,"action":177,"scoredAt":178},45,"Medium","Plan remediation","2026-10-16T06:58:04.95317+00:00"]