Tomcat — контейнер сервлетов с открытым исходным кодом

Insufficient Verification of Data Authenticity in Apache Tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Improper Input Validation in Apache Tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Improper Authentication in Apache Tomcat

Use of Hard-coded Cryptographic Key in Apache Tomcat

Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request

Insertion of Sensitive Information into Log File in Apache Tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat