org.apache.tomcat:tomcat-catalina (Maven)
Advisories
155
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.25 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>11.0.25</version></dependency>gradle
implementation("org.apache.tomcat:tomcat-catalina:11.0.25")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability |
Critical EPSS 0.64% |
>= 7.0.0, <= 7.0.109 | No fix yet |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability |
Critical EPSS 0.64% |
>= 11.0.0-M1, < 11.0.25 | 11.0.25 |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability |
Critical EPSS 0.64% |
>= 10.1.0-M1, < 10.1.58 | 10.1.58 |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability |
Critical EPSS 0.64% |
>= 9.0.0-M1, < 9.0.121 | 9.0.121 |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability |
Critical EPSS 0.64% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability |
Critical EPSS 0.76% |
>= 11.0.0-M1, < 11.0.25 | 11.0.25 |
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability |
Critical EPSS 0.76% |
>= 10.1.0-M1, < 10.1.58 | 10.1.58 |
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability |
Critical EPSS 0.76% |
>= 9.0.0.M1, < 9.0.121 | 9.0.121 |
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability |
Critical EPSS 0.76% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability |
Critical EPSS 0.76% |
>= 7.0.30, <= 7.0.109 | No fix yet |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability |
Critical EPSS 0.65% |
>= 11.0.0-M1, < 11.0.25 | 11.0.25 |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability |
Critical EPSS 0.65% |
>= 10.1.0-M1, < 10.1.58 | 10.1.58 |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability |
Critical EPSS 0.65% |
>= 9.0.0-M1, < 9.0.121 | 9.0.121 |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability |
Critical EPSS 0.65% |
>= 7.0.0, <= 7.0.109 | No fix yet |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability |
Critical EPSS 0.65% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-5m62-pw8w-7w9f Apache Tomcat - Security constraints not correctly applied |
Critical EPSS 1.22% |
< 9.0.118 | 9.0.118 |
| GHSA-5m62-pw8w-7w9f Apache Tomcat - Security constraints not correctly applied |
Critical EPSS 1.22% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-5m62-pw8w-7w9f Apache Tomcat - Security constraints not correctly applied |
Critical EPSS 1.22% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-9m89-8frq-c98c Apache Tomcat - AJP secret compared in non-constant time |
Low EPSS 0.35% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-9m89-8frq-c98c Apache Tomcat - AJP secret compared in non-constant time |
Low EPSS 0.35% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-9m89-8frq-c98c Apache Tomcat - AJP secret compared in non-constant time |
Low EPSS 0.35% |
< 9.0.118 | 9.0.118 |
| GHSA-5mp6-jrq3-r938 Apache Tomcat: LockOutRealm treats user names as case-sensitive |
High EPSS 0.50% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-5mp6-jrq3-r938 Apache Tomcat: LockOutRealm treats user names as case-sensitive |
High EPSS 0.50% |
< 9.0.118 | 9.0.118 |
| GHSA-5mp6-jrq3-r938 Apache Tomcat: LockOutRealm treats user names as case-sensitive |
High EPSS 0.50% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-h6fc-48rj-7qqh Apache Tomcat - Digest authenticator will authenticate any unknown user |
Critical EPSS 1.33% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-h6fc-48rj-7qqh Apache Tomcat - Digest authenticator will authenticate any unknown user |
Critical EPSS 1.33% |
< 9.0.118 | 9.0.118 |
| GHSA-h6fc-48rj-7qqh Apache Tomcat - Digest authenticator will authenticate any unknown user |
Critical EPSS 1.33% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-fv25-8xcx-gqjc Apache Tomcat - WebSocket authentication header exposure |
High EPSS 0.65% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-fv25-8xcx-gqjc Apache Tomcat - WebSocket authentication header exposure |
High EPSS 0.65% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-fv25-8xcx-gqjc Apache Tomcat - WebSocket authentication header exposure |
High EPSS 0.65% |
< 9.0.118 | 9.0.118 |
| GHSA-gx5v-xp9w-j4cg Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling |
High EPSS 0.84% |
>= 11.0.0-M1, < 11.0.22 | 11.0.22 |
| GHSA-gx5v-xp9w-j4cg Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling |
High EPSS 0.84% |
>= 10.1.0-M1, < 10.1.55 | 10.1.55 |
| GHSA-gx5v-xp9w-j4cg Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling |
High EPSS 0.84% |
< 9.0.118 | 9.0.118 |
| GHSA-rv64-5gf8-9qq8 Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve |
High EPSS 0.46% |
>= 9.0.40, < 9.0.116 | 9.0.116 |
| GHSA-rv64-5gf8-9qq8 Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve |
High EPSS 0.46% |
>= 10.1.0-M1, < 10.1.54 | 10.1.54 |
| GHSA-rv64-5gf8-9qq8 Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve |
High EPSS 0.46% |
>= 11.0.0-M1, < 11.0.21 | 11.0.21 |
| GHSA-9m3c-qcxr-9x87 Apache Tomcat has an Open Redirect vulnerability |
Medium EPSS 0.53% |
>= 8.5.30, < 9.0.116 | 9.0.116 |
| GHSA-9m3c-qcxr-9x87 Apache Tomcat has an Open Redirect vulnerability |
Medium EPSS 0.53% |
>= 10.1.0-M1, < 10.1.53 | 10.1.53 |
| GHSA-9m3c-qcxr-9x87 Apache Tomcat has an Open Redirect vulnerability |
Medium EPSS 0.53% |
>= 11.0.0-M1, < 11.0.20 | 11.0.20 |
| GHSA-hgrr-935x-pq79 Apache Tomcat Vulnerable to Improper Resource Shutdown or Release |
Medium EPSS 1.25% |
>= 9.0.0.M1, < 9.0.110 | 9.0.110 |
| GHSA-hgrr-935x-pq79 Apache Tomcat Vulnerable to Improper Resource Shutdown or Release |
Medium EPSS 1.25% |
>= 10.1.0-M1, < 10.1.47 | 10.1.47 |
| GHSA-hgrr-935x-pq79 Apache Tomcat Vulnerable to Improper Resource Shutdown or Release |
Medium EPSS 1.25% |
>= 11.0.0-M1, < 11.0.12 | 11.0.12 |
| GHSA-hgrr-935x-pq79 Apache Tomcat Vulnerable to Improper Resource Shutdown or Release |
Medium EPSS 1.25% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-vfww-5hm6-hx2j Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences |
Critical EPSS 10.17% |
>= 10.1.0-M1, < 10.1.45 | 10.1.45 |
| GHSA-vfww-5hm6-hx2j Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences |
Critical EPSS 10.17% |
>= 9.0.40, < 9.0.109 | 9.0.109 |
| GHSA-vfww-5hm6-hx2j Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences |
Critical EPSS 10.17% |
>= 11.0.0-M1, < 11.0.11 | 11.0.11 |
| GHSA-vfww-5hm6-hx2j Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences |
Critical EPSS 10.17% |
>= 8.5.60, <= 8.5.100 | No fix yet |
| GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal |
High EPSS 64.41% |
>= 11.0.0-M1, < 11.0.11 | 11.0.11 |
| GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal |
High EPSS 64.41% |
>= 8.5.6, <= 8.5.100 | No fix yet |
| GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal |
High EPSS 64.41% |
>= 9.0.0-M11, < 9.0.109 | 9.0.109 |
| GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal |
High EPSS 64.41% |
>= 10.1.0-M1, < 10.1.45 | 10.1.45 |
| GHSA-23hv-mwm6-g8jf Apache Tomcat Session Fixation vulnerability |
Medium EPSS 0.86% |
>= 11.0.0-M1, < 11.0.8 | 11.0.8 |
| GHSA-23hv-mwm6-g8jf Apache Tomcat Session Fixation vulnerability |
Medium EPSS 0.86% |
>= 10.1.0-M1, < 10.1.42 | 10.1.42 |
| GHSA-23hv-mwm6-g8jf Apache Tomcat Session Fixation vulnerability |
Medium EPSS 0.86% |
>= 9.0.0.M1, < 9.0.106 | 9.0.106 |
| GHSA-wr62-c79q-cv37 Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits |
High EPSS 2.20% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-wr62-c79q-cv37 Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits |
High EPSS 2.20% |
>= 11.0.0-M1, < 11.0.9 | 11.0.9 |
| GHSA-wr62-c79q-cv37 Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits |
High EPSS 2.20% |
>= 10.1.0-M1, < 10.1.43 | 10.1.43 |
| GHSA-wr62-c79q-cv37 Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits |
High EPSS 2.20% |
>= 9.0.0.M1, < 9.0.107 | 9.0.107 |
| GHSA-wc4r-xq3c-5cf3 Apache Tomcat - Security constraint bypass for pre/post-resources |
High EPSS 3.44% |
>= 11.0.0-M1, < 11.0.8 | 11.0.8 |
| GHSA-wc4r-xq3c-5cf3 Apache Tomcat - Security constraint bypass for pre/post-resources |
High EPSS 3.44% |
>= 10.1.0-M1, < 10.1.42 | 10.1.42 |
| GHSA-wc4r-xq3c-5cf3 Apache Tomcat - Security constraint bypass for pre/post-resources |
High EPSS 3.44% |
>= 9.0.0.M1, < 9.0.106 | 9.0.106 |
| GHSA-wc4r-xq3c-5cf3 Apache Tomcat - Security constraint bypass for pre/post-resources |
High EPSS 3.44% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-42wg-hm62-jcwg Apache Tomcat installer for Windows has an untrusted search path vulnerability |
High EPSS 0.36% |
>= 11.0.0-M1, < 11.0.8 | 11.0.8 |
| GHSA-42wg-hm62-jcwg Apache Tomcat installer for Windows has an untrusted search path vulnerability |
High EPSS 0.36% |
>= 9.0.23, < 9.0.106 | 9.0.106 |
| GHSA-42wg-hm62-jcwg Apache Tomcat installer for Windows has an untrusted search path vulnerability |
High EPSS 0.36% |
>= 10.1.0, < 10.1.42 | 10.1.42 |
| GHSA-h3gc-qfqq-6h8f Apache Tomcat - DoS in multipart upload |
High EPSS 30.43% |
>= 9.0.0.M1, < 9.0.106 | 9.0.106 |
| GHSA-h3gc-qfqq-6h8f Apache Tomcat - DoS in multipart upload |
High EPSS 30.43% |
>= 10.1.0-M1, < 10.1.42 | 10.1.42 |
| GHSA-h3gc-qfqq-6h8f Apache Tomcat - DoS in multipart upload |
High EPSS 30.43% |
>= 11.0.0-M1, < 11.0.8 | 11.0.8 |
| GHSA-h3gc-qfqq-6h8f Apache Tomcat - DoS in multipart upload |
High EPSS 30.43% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-h2fw-rfh5-95r3 Apache Tomcat - CGI security constraint bypass |
High EPSS 3.14% |
>= 11.0.0-M1, < 11.0.7 | 11.0.7 |
| GHSA-h2fw-rfh5-95r3 Apache Tomcat - CGI security constraint bypass |
High EPSS 3.14% |
>= 9.0.0.M1, < 9.0.105 | 9.0.105 |
| GHSA-h2fw-rfh5-95r3 Apache Tomcat - CGI security constraint bypass |
High EPSS 3.14% |
>= 10.1.0-M1, < 10.1.41 | 10.1.41 |
| GHSA-h2fw-rfh5-95r3 Apache Tomcat - CGI security constraint bypass |
High EPSS 3.14% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-ff77-26x5-69cr Apache Tomcat Rewrite rule bypass |
Critical EPSS 4.26% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-ff77-26x5-69cr Apache Tomcat Rewrite rule bypass |
Critical EPSS 4.26% |
>= 10.1.10, < 10.1.40 | 10.1.40 |
| GHSA-ff77-26x5-69cr Apache Tomcat Rewrite rule bypass |
Critical EPSS 4.26% |
>= 9.0.76, < 9.0.104 | 9.0.104 |
| GHSA-ff77-26x5-69cr Apache Tomcat Rewrite rule bypass |
Critical EPSS 4.26% |
>= 11.0.0-M2, < 11.0.6 | 11.0.6 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 11.0.0-M1, < 11.0.3 | 11.0.3 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 9.0.0.M1, < 9.0.99 | 9.0.99 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 10.1.0-M1, < 10.1.35 | 10.1.35 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 11.0.0-M1, < 11.0.3 | 11.0.3 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 9.0.0.M1, < 9.0.99 | 9.0.99 |
| GHSA-83qj-6fr2-vhqg Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Known exploited |
Critical EPSS 99.94% |
>= 10.1.0-M1, < 10.1.35 | 10.1.35 |
| GHSA-27hp-xhwr-wr2m Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 8.97% |
>= 11.0.0-M1, < 11.0.2 | 11.0.2 |
| GHSA-27hp-xhwr-wr2m Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 8.97% |
>= 10.1.0-M1, < 10.1.34 | 10.1.34 |
| GHSA-5j33-cvvr-w245 Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 31.82% |
>= 8.5.0, <= 8.5.100 | No fix yet |
| GHSA-5j33-cvvr-w245 Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 31.82% |
>= 10.1.0-M1, < 10.1.34 | 10.1.34 |
| GHSA-5j33-cvvr-w245 Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 31.82% |
>= 9.0.0.M1, < 9.0.98 | 9.0.98 |
| GHSA-5j33-cvvr-w245 Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Critical EPSS 31.82% |
>= 11.0.0-M1, < 11.0.2 | 11.0.2 |
| GHSA-xcpr-7mr4-h4xq Apache Tomcat - Authentication Bypass |
Critical EPSS 6.25% |
< 9.0.96 | 9.0.96 |
| GHSA-xcpr-7mr4-h4xq Apache Tomcat - Authentication Bypass |
Critical EPSS 6.25% |
>= 10.1.0-M1, < 10.1.30 | 10.1.30 |
| GHSA-xcpr-7mr4-h4xq Apache Tomcat - Authentication Bypass |
Critical EPSS 6.25% |
>= 11.0.0-M1, < 11.0.1 | 11.0.1 |
| GHSA-fccv-jmmp-qg76 Apache Tomcat Improper Input Validation vulnerability |
High EPSS 2.65% |
>= 9.0.0-M1, < 9.0.83 | 9.0.83 |
| GHSA-fccv-jmmp-qg76 Apache Tomcat Improper Input Validation vulnerability |
High EPSS 2.65% |
>= 11.0.0-M1, < 11.0.0-M11 | 11.0.0-M11 |
| GHSA-fccv-jmmp-qg76 Apache Tomcat Improper Input Validation vulnerability |
High EPSS 2.65% |
>= 10.1.0-M1, < 10.1.16 | 10.1.16 |
| GHSA-fccv-jmmp-qg76 Apache Tomcat Improper Input Validation vulnerability |
High EPSS 2.65% |
>= 8.5.0, < 8.5.96 | 8.5.96 |
| GHSA-g8pj-r55q-5c2v Apache Tomcat Incomplete Cleanup vulnerability |
Medium EPSS 2.51% |
>= 8.5.0, < 8.5.94 | 8.5.94 |
| GHSA-g8pj-r55q-5c2v Apache Tomcat Incomplete Cleanup vulnerability |
Medium EPSS 2.51% |
>= 11.0.0-M1, < 11.0.0-M12 | 11.0.0-M12 |
| GHSA-g8pj-r55q-5c2v Apache Tomcat Incomplete Cleanup vulnerability |
Medium EPSS 2.51% |
>= 9.0.0-M1, < 9.0.81 | 9.0.81 |
| GHSA-g8pj-r55q-5c2v Apache Tomcat Incomplete Cleanup vulnerability |
Medium EPSS 2.51% |
>= 10.1.0-M1, < 10.1.14 | 10.1.14 |
| GHSA-q3mw-pvr8-9ggc Apache Tomcat Open Redirect vulnerability |
Medium EPSS 6.46% |
>= 8.5.0, < 8.5.93 | 8.5.93 |
| GHSA-q3mw-pvr8-9ggc Apache Tomcat Open Redirect vulnerability |
Medium EPSS 6.46% |
>= 10.1.0-M1, < 10.1.13 | 10.1.13 |
| GHSA-q3mw-pvr8-9ggc Apache Tomcat Open Redirect vulnerability |
Medium EPSS 6.46% |
>= 9.0.0-M1, < 9.0.80 | 9.0.80 |
| GHSA-2c9m-w27f-53rm Apache Tomcat vulnerable to Unprotected Transport of Credentials |
Medium EPSS 1.83% |
>= 8.5.0, < 8.5.86 | 8.5.86 |
| GHSA-2c9m-w27f-53rm Apache Tomcat vulnerable to Unprotected Transport of Credentials |
Medium EPSS 1.83% |
>= 11.0.0-M1, < 11.0.0-M3 | 11.0.0-M3 |
| GHSA-2c9m-w27f-53rm Apache Tomcat vulnerable to Unprotected Transport of Credentials |
Medium EPSS 1.83% |
>= 10.1.0-M1, < 10.1.6 | 10.1.6 |
| GHSA-2c9m-w27f-53rm Apache Tomcat vulnerable to Unprotected Transport of Credentials |
Medium EPSS 1.83% |
>= 9.0.0-M1, < 9.0.72 | 9.0.72 |
| GHSA-hfrx-6qgj-fp6c Apache Commons FileUpload denial of service vulnerability |
High EPSS 48.79% |
>= 9.0.0-M1, < 9.0.71 | 9.0.71 |
| GHSA-hfrx-6qgj-fp6c Apache Commons FileUpload denial of service vulnerability |
High EPSS 48.79% |
>= 11.0.0-M2, < 11.0.0-M5 | 11.0.0-M5 |
| GHSA-hfrx-6qgj-fp6c Apache Commons FileUpload denial of service vulnerability |
High EPSS 48.79% |
>= 10.1.0-M1, < 10.1.5 | 10.1.5 |
| GHSA-hfrx-6qgj-fp6c Apache Commons FileUpload denial of service vulnerability |
High EPSS 48.79% |
>= 8.5.85, < 8.5.88 | 8.5.88 |
| GHSA-rq2w-37h9-vg94 Apache Tomcat improperly escapes input from JsonErrorReportValve |
High EPSS 2.57% |
>= 10.1.0, < 10.1.2 | 10.1.2 |
| GHSA-9xrj-439h-62hg Improper Authentication in Apache Tomcat |
Medium EPSS 8.77% |
>= 5.5.0, < 5.5.36 | 5.5.36 |
| GHSA-9xrj-439h-62hg Improper Authentication in Apache Tomcat |
Medium EPSS 8.77% |
>= 7.0.0, < 7.0.30 | 7.0.30 |
| GHSA-9xrj-439h-62hg Improper Authentication in Apache Tomcat |
Medium EPSS 8.77% |
>= 6.0.0, < 6.0.36 | 6.0.36 |
| GHSA-qprx-q2r7-3rx6 Improper Input Validation in Apache Tomcat |
Medium EPSS 6.91% |
>= 7.0.0, < 7.0.54 | 7.0.54 |
| GHSA-prc3-7f44-w48j Missing XML Validation in Apache Tomcat |
Medium EPSS 7.62% |
< 6.0.40 | 6.0.40 |
| GHSA-prc3-7f44-w48j Missing XML Validation in Apache Tomcat |
Medium EPSS 7.62% |
>= 7.0.0, < 7.0.54 | 7.0.54 |
| GHSA-prc3-7f44-w48j Missing XML Validation in Apache Tomcat |
Medium EPSS 7.62% |
>= 8.0.0, < 8.0.6 | 8.0.6 |
| GHSA-qprx-q2r7-3rx6 Improper Input Validation in Apache Tomcat |
Medium EPSS 6.91% |
< 6.0.40 | 6.0.40 |
| GHSA-qprx-q2r7-3rx6 Improper Input Validation in Apache Tomcat |
Medium EPSS 6.91% |
>= 8.0.0, < 8.0.6 | 8.0.6 |
| GHSA-8qq4-8jvq-mfw4 Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat |
High EPSS 70.12% |
>= 7.0.0, < 7.0.81 | 7.0.81 |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 9.0.0.M1, < 9.0.1 | 9.0.1 |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 7.0.0, <= 7.0.81 | No fix yet |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 8.5.0, <= 8.5.22 | No fix yet |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 9.0.0.M1, <= 9.0.0M27 | No fix yet |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 7.0.0, < 7.0.82 | 7.0.82 |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 8.0.0-RC1, < 8.0.47 | 8.0.47 |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 8.5.0, < 8.5.23 | 8.5.23 |
| GHSA-xjgh-84hx-56c5 Unrestricted Upload of File with Dangerous Type Apache Tomcat Known exploited |
High EPSS 99.97% |
>= 8.0.0-RC1, <= 8.0.46 | No fix yet |
| GHSA-3vx3-xf6q-r5xp Exposure of Resource to Wrong Sphere in Apache Tomcat |
Critical EPSS 13.23% |
>= 8.5.0, < 8.5.13 | 8.5.13 |
| GHSA-3vx3-xf6q-r5xp Exposure of Resource to Wrong Sphere in Apache Tomcat |
Critical EPSS 13.23% |
>= 7.0.0, < 7.0.76 | 7.0.76 |
| GHSA-3vx3-xf6q-r5xp Exposure of Resource to Wrong Sphere in Apache Tomcat |
Critical EPSS 13.23% |
>= 8.0.0, < 8.0.42 | 8.0.42 |
| GHSA-3vx3-xf6q-r5xp Exposure of Resource to Wrong Sphere in Apache Tomcat |
Critical EPSS 13.23% |
>= 9.0.0.M1, < 9.0.0.M18 | 9.0.0.M18 |
| GHSA-v646-rx6w-r3qq Improper Access Control in Apache Tomcat |
High EPSS 50.90% |
>= 8.0.0, < 8.5.5 | 8.5.5 |
| GHSA-v646-rx6w-r3qq Improper Access Control in Apache Tomcat |
High EPSS 50.90% |
>= 7.0.0, < 7.0.72 | 7.0.72 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
< 6.0.48 | 6.0.48 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 8.0.0, < 8.0.39 | 8.0.39 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 7.0.0, < 7.0.73 | 7.0.73 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
< 6.0.48 | 6.0.48 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 9.0.0.M1, < 9.0.0.M12 | 9.0.0.M12 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 8.5.0, < 8.5.7 | 8.5.7 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 8.0.0, < 8.0.39 | 8.0.39 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 7.0.0, < 7.0.73 | 7.0.73 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 9.0.0.M1, < 9.0.0.M12 | 9.0.0.M12 |
| GHSA-cw54-59pw-4g8c Apache Tomcat Improper Access Control vulnerability Known exploited |
Critical EPSS 90.34% |
>= 8.5.0, < 8.5.7 | 8.5.7 |
| GHSA-344f-f5vg-2jfj Potential remote code execution in Apache Tomcat |
High EPSS 55.52% |
>= 9.0.0, < 9.0.35 | 9.0.35 |
| GHSA-344f-f5vg-2jfj Potential remote code execution in Apache Tomcat |
High EPSS 55.52% |
>= 10.0.0-M1, < 10.0.0-M5 | 10.0.0-M5 |
| GHSA-344f-f5vg-2jfj Potential remote code execution in Apache Tomcat |
High EPSS 55.52% |
>= 8.0.0, < 8.5.55 | 8.5.55 |
| GHSA-344f-f5vg-2jfj Potential remote code execution in Apache Tomcat |
High EPSS 55.52% |
>= 7.0.0, < 7.0.104 | 7.0.104 |
| GHSA-jjpq-gp5q-8q6w Cross-site scripting in Apache Tomcat |
Medium EPSS 59.19% |
>= 8.5.0, < 8.5.40 | 8.5.40 |
| GHSA-jjpq-gp5q-8q6w Cross-site scripting in Apache Tomcat |
Medium EPSS 59.19% |
>= 9.0.0, < 9.0.17 | 9.0.17 |
| GHSA-jjpq-gp5q-8q6w Cross-site scripting in Apache Tomcat |
Medium EPSS 59.19% |
>= 7.0.0, < 7.0.94 | 7.0.94 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor