Поиск уязвимостей
Количество 10
Количество 10
CVE-2022-45143
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.
CVE-2022-45143
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.
CVE-2022-45143
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.
CVE-2022-45143
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and ...
SUSE-SU-2023:1853-1
Security update for tomcat
GHSA-rq2w-37h9-vg94
Apache Tomcat improperly escapes input from JsonErrorReportValve
BDU:2024-03597
Уязвимость класса JsonErrorReportValve сервера приложений Apache Tomcat, позволяющая нарушителю оказать влияние на целостность защищаемой информации
ROS-20240729-04
Уязвимость tomcat
ALT-PU-2023-8058
ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11
ALT-PU-2025-2379
ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-45143 The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output. | CVSS3: 7.5 | 3% Низкий | почти 4 года назад |
 | CVE-2022-45143 The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output. | CVSS3: 7.5 | 3% Низкий | почти 4 года назад |
 | CVE-2022-45143 The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output. | CVSS3: 7.5 | 3% Низкий | почти 4 года назад |
| CVE-2022-45143 The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and ... | CVSS3: 7.5 | 3% Низкий | почти 4 года назад |
 | SUSE-SU-2023:1853-1 Security update for tomcat | 3% Низкий | больше 3 лет назад | |
| GHSA-rq2w-37h9-vg94 Apache Tomcat improperly escapes input from JsonErrorReportValve | CVSS3: 7.5 | 3% Низкий | почти 4 года назад |
 | BDU:2024-03597 Уязвимость класса JsonErrorReportValve сервера приложений Apache Tomcat, позволяющая нарушителю оказать влияние на целостность защищаемой информации | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
 | ROS-20240729-04 Уязвимость tomcat | CVSS3: 7.5 | 3% Низкий | больше 2 лет назад |
| ALT-PU-2023-8058 ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11 | CVSS3: 7.5 | почти 3 года назад | |
| ALT-PU-2025-2379 ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1 | CVSS3: 9.8 | больше 1 года назад |
Уязвимостей на страницу