Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.51 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4qt5-mdpt-aaas
Aliases: CVE-2017-12615 GHSA-pjfr-qf3p-3q25 |
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server |
Affected by 13 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-m8ve-za8b-aaap
Aliases: CVE-2017-12616 GHSA-8qq4-8jvq-mfw4 |
Information Exposure When using a `VirtualDirContext` with Apache Tomcat it is possible to bypass security constraints and/or view the source code of JSPs for resources served by the `VirtualDirContext` using a specially crafted request. |
Affected by 13 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:36:58.052585+00:00 | GitLab Importer | Affected by | VCID-m8ve-za8b-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2017-12616.yml | 34.0.1 |
| 2024-09-17T22:36:56.336225+00:00 | GitLab Importer | Affected by | VCID-4qt5-mdpt-aaas | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2017-12615.yml | 34.0.1 |
| 2024-01-03T18:00:01.847795+00:00 | GitLab Importer | Affected by | VCID-m8ve-za8b-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2017-12616.yml | 34.0.0rc1 |
| 2024-01-03T18:00:00.100143+00:00 | GitLab Importer | Affected by | VCID-4qt5-mdpt-aaas | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2017-12615.yml | 34.0.0rc1 |