Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1xh1-329x-aaar
Aliases: CVE-2013-2185 GHSA-v6c7-8qx5-8gmp |
Arbitrary file upload via deserialization A remote attacker able to supply a serialized instance of the DiskFileItem class, which will be deserialized on a server, could use this flaw to write arbitrary content to any location on the server that is permitted by the user running the application server process. |
Affected by 7 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-qcms-zybq-aaap
Aliases: CVE-2014-0050 GHSA-xx68-jfcg-xmmf |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 6 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:36:25.169467+00:00 | GitLab Importer | Affected by | VCID-1xh1-329x-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2013-2185.yml | 34.0.1 |
| 2024-09-17T22:36:24.595462+00:00 | GitLab Importer | Affected by | VCID-qcms-zybq-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml | 34.0.1 |
| 2024-01-03T17:59:30.923067+00:00 | GitLab Importer | Affected by | VCID-1xh1-329x-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2013-2185.yml | 34.0.0rc1 |
| 2024-01-03T17:59:30.442311+00:00 | GitLab Importer | Affected by | VCID-qcms-zybq-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2014-0050.yml | 34.0.0rc1 |