Поиск уязвимостей
Количество 14
Количество 14
GHSA-p22x-g9px-3945
Apache Tomcat may reject request containing invalid Content-Length header
CVE-2022-42252
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.
CVE-2022-42252
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.
CVE-2022-42252
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.
CVE-2022-42252
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10. ...
SUSE-SU-2022:4303-1
Security update for tomcat
SUSE-SU-2022:4193-1
Security update for tomcat
BDU:2022-07501
Уязвимость реализации атрибута rejectIllegalHeader сервера приложений Apache Tomcat, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)
SUSE-SU-2022:4257-1
Security update for tomcat
SUSE-SU-2022:4221-1
Security update for tomcat
ROS-20240715-01
Уязвимость tomcat
ALT-PU-2023-8058
ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11
ALT-PU-2025-2379
ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1
SUSE-SU-2026:1058-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-p22x-g9px-3945 Apache Tomcat may reject request containing invalid Content-Length header | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-42252 If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-42252 If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header. | CVSS3: 4.8 | 2% Низкий | около 4 лет назад |
 | CVE-2022-42252 If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| CVE-2022-42252 If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10. ... | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | SUSE-SU-2022:4303-1 Security update for tomcat | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:4193-1 Security update for tomcat | 2% Низкий | почти 4 года назад | |
 | BDU:2022-07501 Уязвимость реализации атрибута rejectIllegalHeader сервера приложений Apache Tomcat, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling) | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| SUSE-SU-2022:4257-1 Security update for tomcat | почти 4 года назад | ||
| SUSE-SU-2022:4221-1 Security update for tomcat | почти 4 года назад | ||
 | ROS-20240715-01 Уязвимость tomcat | CVSS3: 7.5 | 2% Низкий | больше 2 лет назад |
| ALT-PU-2023-8058 ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11 | CVSS3: 7.5 | почти 3 года назад | |
| ALT-PU-2025-2379 ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| SUSE-SU-2026:1058-1 Security update for tomcat | 8 месяцев назад |
Уязвимостей на страницу