Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-util@9.0.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-g8pj-r55q-5c2v
Aliases: CVE-2023-42795 |
Apache Tomcat Incomplete Cleanup vulnerability Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from … |
Vulnerable |
|
CVE-2023-41080
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-0232
|
Improper Input Validation When running on Windows with `enableCmdLineArguments` enabled, the CGI Servlet in Apache Tomcat is vulnerable to Remote … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10072
|
Uncontrolled Resource Consumption The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in … |
Vulnerable Vulnerable |
|
CVE-2018-8037
|
Information Exposure A bug in the tracking of connection closures can lead to reuse of user sessions in a new … |
Vulnerable Vulnerable |
|
CVE-2019-0221
|
Cross-site Scripting The SSI `printenv` command in Apache Tomcat echoes user provided data without escaping and is, therefore, vulnerable to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1336
|
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the … |
Vulnerable Vulnerable Vulnerable Not vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat, the HTTP header parsing code used an approach to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-0199
|
Uncontrolled Resource Consumption The HTTP/2 implementation in Apache Tomcat accepted streams with excessive numbers of `SETTINGS` frames and also permitted … |
Vulnerable Vulnerable |
|
CVE-2023-46589
|
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from … |
Not vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Not vulnerable Vulnerable |
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … | There are no reported fixed by versions. |