Vulnerabilities affecting this package (9)
| Advisory |
Summary |
Fixed in package version |
CVE-2023-42795
|
Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through …
|
There are no reported fixed by versions.
|
CVE-2020-1938
|
Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache …
|
There are no reported fixed by versions.
|
CVE-2023-41080
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 …
|
There are no reported fixed by versions.
|
CVE-2020-13943
|
HTTP Request Smuggling If an `HTTP/2` client connecting to Apache Tomcat to M1 to to exceeded the agreed maximum number …
|
There are no reported fixed by versions.
|
CVE-2023-45648
|
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and …
|
There are no reported fixed by versions.
|
CVE-2020-11996
|
Uncontrolled Resource Consumption A specially crafted sequence of `HTTP/2` requests sent to Apache Tomcat could trigger high CPU usage for …
|
There are no reported fixed by versions.
|
CVE-2023-46589
|
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from …
|
There are no reported fixed by versions.
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
|
There are no reported fixed by versions.
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in …
|
There are no reported fixed by versions.
|
This package is not known to fix any advisories.