CVE-2018-11784: URL Redirection to Untrusted Site (Open Redirect)
(updated )
When the default servlet in Apache Tomcat returns a redirect to a directory, a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
References
Detect and mitigate CVE-2018-11784 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →