Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.23
purl pkg:maven/org.apache.tomcat/tomcat@7.0.23
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2018-11784

Moderate: Open Redirect
7.0.91
Vulnerable
CVE-2018-11784

URL Redirection to Untrusted Site (Open Redirect) When the default servlet in Apache Tomcat returns a redirect to a directory, …
8.5.34
Vulnerable
7.0.91
Vulnerable
9.0.12
Vulnerable
8.5.34
Vulnerable
7.0.91
Vulnerable
9.0.12
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2012-0022
Important: Denial of service
GHSA-wr3m-gw98-mc3j
Improper Input Validation in Apache Tomcat Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values … CVE-2011-4858
GHSA-8h2q-qm9x-55jc
Denial of Service in Apache Tomcat Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an … CVE-2012-0022