Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qppj-fm5r-hxr3
Aliases: CVE-2023-44487 |
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … |
Vulnerable |
|
CVE-2022-42252
|
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') If Apache Tomcat 8.5.0 to 8.5.52, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-1938
|
Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2023-41080
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-13935
|
Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-13943
|
HTTP Request Smuggling If a `HTTP/2` client connecting to Apache Tomcat exceeded the agreed maximum number of concurrent streams for … |
Vulnerable Vulnerable |
|
CVE-2021-33037
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Apache Tomcat does not correctly parse the HTTP transfer-encoding request header in … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-17527
|
Information Exposure While investigating bug it was discovered that Apache Tomcat to to to could re-use an HTTP request header … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-11996
|
Uncontrolled Resource Consumption A specially crafted sequence of `HTTP/2` requests sent to Apache Tomcat could trigger high CPU usage for … |
Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-qcxh-w3j9-58qr
Aliases: CVE-2019-0199 |
Apache Tomcat Denial of Service vulnerability The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted … |
Vulnerable Vulnerable |
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … | There are no reported fixed by versions. |