VulnerableCode Package Details - pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0

purl	pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
Tags	Ghost

Next non-vulnerable version	9.0.122
Latest non-vulnerable version	11.0.26
Risk score

Vulnerabilities affecting this package (2)

Advisory	Summary	Fixed in package version
CVE-2013-2185	Arbitrary file upload via deserialization A remote attacker able to supply a serialized instance of the DiskFileItem class, which will …	7.0.40 Vulnerable
CVE-2014-0050	Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …	7.0.52 Vulnerable 8.0.3 Vulnerable 7.0.52 Vulnerable 8.0.3 Vulnerable

Advisory

Summary

Fixed in package version

CVE-2013-2185

Arbitrary file upload via deserialization A remote attacker able to supply a serialized instance of the DiskFileItem class, which will …

7.0.40
Vulnerable

CVE-2014-0050

Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …

7.0.52
Vulnerable

8.0.3
Vulnerable

7.0.52
Vulnerable

8.0.3
Vulnerable

This package is not known to fix any advisories.