Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2011-2481

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r7c8-hghc-2mp8

Apache Tomcat Allows Replacing of XML Parser Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.

gitlab/maven/org.apache.tomcat/tomcat/CVE-2011-2481

File modification in Apache Tomcat Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.