Apache Tomcat: Schwachstelle ermöglicht Cross-Site Scripting

Summary

Product

Vulnerabilities 1

• Medium 6.1
  CVE-2024-52318 Public exploit

  Apache Tomcat: Incorrect JSP tag recycling leads to XSS

  Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat10 Debian Maven
  Nov 18, 2024

Revision history

1. 2025-09-07 #6

   Neue Updates von Dell aufgenommen

2. 2025-06-23 #5

   Neue Updates von IBM aufgenommen

3. 2025-02-17 #4

   Neue Updates von IBM und IBM-APAR aufgenommen

4. 2024-12-09 #3

   Neue Updates von Fedora aufgenommen

5. 2024-12-02 #2

   Neue Updates von Fedora aufgenommen

6. 2024-11-18 #1

   Initiale Fassung

References

• Fixed in Apache Tomcat 11.0.1 vom 2024-11-18
  https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.1
• Fixed in Apache Tomcat 10.1.33 vom 2024-11-18
  https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.33
• Fixed in Apache Tomcat 9.0.97 vom 2024-11-18
  https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.97
• Fedora Security Advisory FEDORA-2024-59074D64E0 vom 2024-12-02
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-59074d64e0
• Fedora Security Advisory FEDORA-2024-7A2CE50F81 vom 2024-12-02
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7a2ce50f81
• Fedora Security Advisory FEDORA-2024-39C6BB9E06 vom 2024-12-02
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39c6bb9e06
• Fedora Security Advisory FEDORA-2024-2A31FCE8EB vom 2024-12-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2a31fce8eb
• Fedora Security Advisory FEDORA-2024-2CB3145F8D vom 2024-12-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2cb3145f8d
• IBM Security Bulletin 7183568 vom 2025-02-18
  https://www.ibm.com/support/pages/node/7183568
• IBM Security Bulletin 7237707 vom 2025-06-24
  https://www.ibm.com/support/pages/node/7237707
• Dell Security Advisory DSA-2025-309 vom 2025-09-08
  https://www.dell.com/support/kbdoc/de-de/000362754/dsa-2025-309-security-update-for-dell-networker-apache-tomcat-vulnerabilities