Tomcat — контейнер сервлетов с открытым исходным кодом

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.

Apache Tomcat Denial of Service vulnerability in the Catalina package

Jakarta Tomcat cross-site scripting (XSS) vulnerability

Tomcat uses trusted privileges when processing web.xml file

Jakarta Tomcat Directory Listing vulnerability

Jakarta Tomcat Denial of Service vulnerability

Уязвимость реализации класса EncryptInterceptor сервера приложений Apache Tomcat, позволяющая нарушителю вызвать отказ в обслуживании

Security update for tomcat

Security update for tomcat