Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@3.3.1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-gtmk-xrse-aaar
Aliases: CVE-2003-0043 GHSA-cvx5-7vc7-rg77 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file. |
Affected by 1 other vulnerability. |
|
VCID-xfxh-m2mj-aaan
Aliases: CVE-2003-0042 GHSA-qfw2-wvrw-mvw4 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T13:19:41.603997+00:00 | Apache Tomcat Importer | Fixing | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.505271+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.400677+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2024-09-18T08:17:51.458449+00:00 | Apache Tomcat Importer | Fixing | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.365681+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.265767+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-01-04T02:15:54.477458+00:00 | Apache Tomcat Importer | Fixing | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.389249+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.296081+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |