Tomcat — контейнер сервлетов с открытым исходным кодом

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

Apache Tomcat is vulnerable to HTTP request-smuggling

Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token

Improper Input Validation in Apache Tomcat

Authentication Bypass in Apache Tomcat

Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat

Missing XML Validation in Apache Tomcat

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

Uncontrolled Resource Consumption in Apache Tomcat

Apache Tomcat allows remote attackers to bypass intended access restrictions