{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6676?format=json","vulnerability_id":"VCID-mvgq-kb92-dqf8","summary":"","aliases":[{"alias":"CVE-2024-38286"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4864?format=json","purl":"pkg:apache/tomcat@9.0.90","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.90"},{"url":"http://public2.vulnerablecode.io/api/packages/4700?format=json","purl":"pkg:apache/tomcat@10.1.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.25"},{"url":"http://public2.vulnerablecode.io/api/packages/4620?format=json","purl":"pkg:apache/tomcat@11.0.0-M21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M21"},{"url":"http://public2.vulnerablecode.io/api/packages/4866?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@9.0.90","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.90"},{"url":"http://public2.vulnerablecode.io/api/packages/4702?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@10.1.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.25"},{"url":"http://public2.vulnerablecode.io/api/packages/4622?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@11.0.0-M21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M21"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4813?format=json","purl":"pkg:apache/tomcat@9.0.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3e3b-6dse-s3gf"},{"vulnerability":"VCID-4pgx-mk91-xyba"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.13"},{"url":"http://public2.vulnerablecode.io/api/packages/4863?format=json","purl":"pkg:apache/tomcat@9.0.89","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.89"},{"url":"http://public2.vulnerablecode.io/api/packages/4643?format=json","purl":"pkg:apache/tomcat@10.1.0-M1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-1mms-9rqw-xqhq"},{"vulnerability":"VCID-2kta-z43d-2uhm"},{"vulnerability":"VCID-35fm-apgj-jqd3"},{"vulnerability":"VCID-4pgx-mk91-xyba"},{"vulnerability":"VCID-4qzp-up1c-2kfq"},{"vulnerability":"VCID-5fj8-g5jf-wybu"},{"vulnerability":"VCID-5j78-np3z-rfda"},{"vulnerability":"VCID-61p6-f9vu-7fca"},{"vulnerability":"VCID-61xw-8vnm-vkcx"},{"vulnerability":"VCID-64r1-zcg6-qfb8"},{"vulnerability":"VCID-67rb-z7qk-zke9"},{"vulnerability":"VCID-6t1m-v4ym-4uhs"},{"vulnerability":"VCID-8btx-vpre-pugb"},{"vulnerability":"VCID-9248-b5q8-2bc7"},{"vulnerability":"VCID-9g9v-wsbr-hkde"},{"vulnerability":"VCID-9ptv-guzs-kyg1"},{"vulnerability":"VCID-9w58-wv96-dfhb"},{"vulnerability":"VCID-a8x5-hzkb-vuf4"},{"vulnerability":"VCID-b9hb-uzqm-wbcp"},{"vulnerability":"VCID-bqkn-zvm1-4kd6"},{"vulnerability":"VCID-c8b5-23zz-cudd"},{"vulnerability":"VCID-dk5d-3ebq-yfbn"},{"vulnerability":"VCID-eehy-pgzv-vudx"},{"vulnerability":"VCID-ffqg-mkqf-xqgh"},{"vulnerability":"VCID-g9rk-me3p-1fey"},{"vulnerability":"VCID-h11m-szkg-p7c5"},{"vulnerability":"VCID-hdnj-g415-2bbw"},{"vulnerability":"VCID-j4ut-s3e4-qqh7"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-kdhy-vpg2-nqgh"},{"vulnerability":"VCID-kq3c-qp43-dqgg"},{"vulnerability":"VCID-kxvn-6xbg-4fep"},{"vulnerability":"VCID-mvgq-kb92-dqf8"},{"vulnerability":"VCID-nafh-ss66-efc1"},{"vulnerability":"VCID-p7x2-ejss-ffd1"},{"vulnerability":"VCID-pmx1-hkph-4qhd"},{"vulnerability":"VCID-rx6f-x5cc-6bef"},{"vulnerability":"VCID-ryjx-b2fp-5bbc"},{"vulnerability":"VCID-s6p4-xq69-6fb4"},{"vulnerability":"VCID-twp1-3h1f-r3de"},{"vulnerability":"VCID-wpew-vv5h-r7c5"},{"vulnerability":"VCID-wtt7-38dy-gbec"},{"vulnerability":"VCID-xdgh-k9su-4bes"},{"vulnerability":"VCID-xym1-6dp5-t7d7"},{"vulnerability":"VCID-y5je-ud4g-ufdc"},{"vulnerability":"VCID-z1yq-nwk7-1kba"},{"vulnerability":"VCID-z6g3-j67d-87hc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.0-M1"},{"url":"http://public2.vulnerablecode.io/api/packages/4699?format=json","purl":"pkg:apache/tomcat@10.1.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.24"},{"url":"http://public2.vulnerablecode.io/api/packages/4567?format=json","purl":"pkg:apache/tomcat@11.0.0-M1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-1mms-9rqw-xqhq"},{"vulnerability":"VCID-35fm-apgj-jqd3"},{"vulnerability":"VCID-3e3b-6dse-s3gf"},{"vulnerability":"VCID-4qzp-up1c-2kfq"},{"vulnerability":"VCID-5j78-np3z-rfda"},{"vulnerability":"VCID-61p6-f9vu-7fca"},{"vulnerability":"VCID-61xw-8vnm-vkcx"},{"vulnerability":"VCID-64r1-zcg6-qfb8"},{"vulnerability":"VCID-67rb-z7qk-zke9"},{"vulnerability":"VCID-6t1m-v4ym-4uhs"},{"vulnerability":"VCID-71uq-hgqp-b3a1"},{"vulnerability":"VCID-8btx-vpre-pugb"},{"vulnerability":"VCID-9248-b5q8-2bc7"},{"vulnerability":"VCID-9ptv-guzs-kyg1"},{"vulnerability":"VCID-9w58-wv96-dfhb"},{"vulnerability":"VCID-b4g7-nvey-5bh3"},{"vulnerability":"VCID-b9hb-uzqm-wbcp"},{"vulnerability":"VCID-bqkn-zvm1-4kd6"},{"vulnerability":"VCID-c8b5-23zz-cudd"},{"vulnerability":"VCID-dk5d-3ebq-yfbn"},{"vulnerability":"VCID-eehy-pgzv-vudx"},{"vulnerability":"VCID-ek4k-3m72-qqbf"},{"vulnerability":"VCID-ffqg-mkqf-xqgh"},{"vulnerability":"VCID-g9rk-me3p-1fey"},{"vulnerability":"VCID-h11m-szkg-p7c5"},{"vulnerability":"VCID-hdnj-g415-2bbw"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-kdhy-vpg2-nqgh"},{"vulnerability":"VCID-kq3c-qp43-dqgg"},{"vulnerability":"VCID-kxvn-6xbg-4fep"},{"vulnerability":"VCID-mvgq-kb92-dqf8"},{"vulnerability":"VCID-nafh-ss66-efc1"},{"vulnerability":"VCID-p7x2-ejss-ffd1"},{"vulnerability":"VCID-pmx1-hkph-4qhd"},{"vulnerability":"VCID-rx6f-x5cc-6bef"},{"vulnerability":"VCID-ryjx-b2fp-5bbc"},{"vulnerability":"VCID-s6p4-xq69-6fb4"},{"vulnerability":"VCID-twp1-3h1f-r3de"},{"vulnerability":"VCID-wpew-vv5h-r7c5"},{"vulnerability":"VCID-xdgh-k9su-4bes"},{"vulnerability":"VCID-y5je-ud4g-ufdc"},{"vulnerability":"VCID-z1yq-nwk7-1kba"},{"vulnerability":"VCID-z6g3-j67d-87hc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M1"},{"url":"http://public2.vulnerablecode.io/api/packages/4619?format=json","purl":"pkg:apache/tomcat@11.0.0-M20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M20"},{"url":"http://public2.vulnerablecode.io/api/packages/4814?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@9.0.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3e3b-6dse-s3gf"},{"vulnerability":"VCID-4pgx-mk91-xyba"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.13"},{"url":"http://public2.vulnerablecode.io/api/packages/4865?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@9.0.89","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.89"},{"url":"http://public2.vulnerablecode.io/api/packages/4646?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-1mms-9rqw-xqhq"},{"vulnerability":"VCID-2kta-z43d-2uhm"},{"vulnerability":"VCID-35fm-apgj-jqd3"},{"vulnerability":"VCID-4pgx-mk91-xyba"},{"vulnerability":"VCID-4qzp-up1c-2kfq"},{"vulnerability":"VCID-5fj8-g5jf-wybu"},{"vulnerability":"VCID-5j78-np3z-rfda"},{"vulnerability":"VCID-61p6-f9vu-7fca"},{"vulnerability":"VCID-61xw-8vnm-vkcx"},{"vulnerability":"VCID-64r1-zcg6-qfb8"},{"vulnerability":"VCID-67rb-z7qk-zke9"},{"vulnerability":"VCID-6t1m-v4ym-4uhs"},{"vulnerability":"VCID-8btx-vpre-pugb"},{"vulnerability":"VCID-9248-b5q8-2bc7"},{"vulnerability":"VCID-9g9v-wsbr-hkde"},{"vulnerability":"VCID-9ptv-guzs-kyg1"},{"vulnerability":"VCID-9w58-wv96-dfhb"},{"vulnerability":"VCID-a8x5-hzkb-vuf4"},{"vulnerability":"VCID-b9hb-uzqm-wbcp"},{"vulnerability":"VCID-bqkn-zvm1-4kd6"},{"vulnerability":"VCID-c8b5-23zz-cudd"},{"vulnerability":"VCID-dk5d-3ebq-yfbn"},{"vulnerability":"VCID-eehy-pgzv-vudx"},{"vulnerability":"VCID-ffqg-mkqf-xqgh"},{"vulnerability":"VCID-g9rk-me3p-1fey"},{"vulnerability":"VCID-h11m-szkg-p7c5"},{"vulnerability":"VCID-hdnj-g415-2bbw"},{"vulnerability":"VCID-j4ut-s3e4-qqh7"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-kdhy-vpg2-nqgh"},{"vulnerability":"VCID-kq3c-qp43-dqgg"},{"vulnerability":"VCID-kxvn-6xbg-4fep"},{"vulnerability":"VCID-mvgq-kb92-dqf8"},{"vulnerability":"VCID-nafh-ss66-efc1"},{"vulnerability":"VCID-p7x2-ejss-ffd1"},{"vulnerability":"VCID-pmx1-hkph-4qhd"},{"vulnerability":"VCID-rx6f-x5cc-6bef"},{"vulnerability":"VCID-ryjx-b2fp-5bbc"},{"vulnerability":"VCID-s6p4-xq69-6fb4"},{"vulnerability":"VCID-twp1-3h1f-r3de"},{"vulnerability":"VCID-wpew-vv5h-r7c5"},{"vulnerability":"VCID-wtt7-38dy-gbec"},{"vulnerability":"VCID-xdgh-k9su-4bes"},{"vulnerability":"VCID-xym1-6dp5-t7d7"},{"vulnerability":"VCID-y5je-ud4g-ufdc"},{"vulnerability":"VCID-z1yq-nwk7-1kba"},{"vulnerability":"VCID-z6g3-j67d-87hc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1"},{"url":"http://public2.vulnerablecode.io/api/packages/4701?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@10.1.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.24"},{"url":"http://public2.vulnerablecode.io/api/packages/4570?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-1mms-9rqw-xqhq"},{"vulnerability":"VCID-35fm-apgj-jqd3"},{"vulnerability":"VCID-3e3b-6dse-s3gf"},{"vulnerability":"VCID-4qzp-up1c-2kfq"},{"vulnerability":"VCID-5j78-np3z-rfda"},{"vulnerability":"VCID-61p6-f9vu-7fca"},{"vulnerability":"VCID-61xw-8vnm-vkcx"},{"vulnerability":"VCID-64r1-zcg6-qfb8"},{"vulnerability":"VCID-67rb-z7qk-zke9"},{"vulnerability":"VCID-6t1m-v4ym-4uhs"},{"vulnerability":"VCID-71uq-hgqp-b3a1"},{"vulnerability":"VCID-8btx-vpre-pugb"},{"vulnerability":"VCID-9248-b5q8-2bc7"},{"vulnerability":"VCID-9ptv-guzs-kyg1"},{"vulnerability":"VCID-9w58-wv96-dfhb"},{"vulnerability":"VCID-b4g7-nvey-5bh3"},{"vulnerability":"VCID-b9hb-uzqm-wbcp"},{"vulnerability":"VCID-bqkn-zvm1-4kd6"},{"vulnerability":"VCID-c8b5-23zz-cudd"},{"vulnerability":"VCID-dk5d-3ebq-yfbn"},{"vulnerability":"VCID-eehy-pgzv-vudx"},{"vulnerability":"VCID-ek4k-3m72-qqbf"},{"vulnerability":"VCID-ffqg-mkqf-xqgh"},{"vulnerability":"VCID-g9rk-me3p-1fey"},{"vulnerability":"VCID-h11m-szkg-p7c5"},{"vulnerability":"VCID-hdnj-g415-2bbw"},{"vulnerability":"VCID-jz35-ynpa-sqfq"},{"vulnerability":"VCID-kdhy-vpg2-nqgh"},{"vulnerability":"VCID-kq3c-qp43-dqgg"},{"vulnerability":"VCID-kxvn-6xbg-4fep"},{"vulnerability":"VCID-mvgq-kb92-dqf8"},{"vulnerability":"VCID-nafh-ss66-efc1"},{"vulnerability":"VCID-p7x2-ejss-ffd1"},{"vulnerability":"VCID-pmx1-hkph-4qhd"},{"vulnerability":"VCID-rx6f-x5cc-6bef"},{"vulnerability":"VCID-ryjx-b2fp-5bbc"},{"vulnerability":"VCID-s6p4-xq69-6fb4"},{"vulnerability":"VCID-twp1-3h1f-r3de"},{"vulnerability":"VCID-wpew-vv5h-r7c5"},{"vulnerability":"VCID-xdgh-k9su-4bes"},{"vulnerability":"VCID-y5je-ud4g-ufdc"},{"vulnerability":"VCID-z1yq-nwk7-1kba"},{"vulnerability":"VCID-z6g3-j67d-87hc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1"},{"url":"http://public2.vulnerablecode.io/api/packages/4621?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@11.0.0-M20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1maq-ar71-p3ha"},{"vulnerability":"VCID-mvgq-kb92-dqf8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M20"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-38286","reference_id":"","reference_type":"","scores":[{"value":"0.00413","scoring_system":"epss","scoring_elements":"0.61765","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-38286"},{"reference_url":"https://github.com/apache/tomcat/commit/3197862639732e16ec1164557bcd289ebc116c93","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/tomcat/commit/3197862639732e16ec1164557bcd289ebc116c93"},{"reference_url":"https://github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543"},{"reference_url":"https://github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38286","reference_id":"CVE-2024-38286","reference_type":"","scores":[{"value":"Important","scoring_system":"apache_tomcat","scoring_elements":""}],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38286"}],"weaknesses":[],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mvgq-kb92-dqf8"}