Tomcat — контейнер сервлетов с открытым исходным кодом

Improper Input Validation in Apache Tomcat

Improper Authentication in Apache Tomcat

native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

Authentication Bypass in Apache Tomcat

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

Apache Tomcat is vulnerable to HTTP request-smuggling