org.apache.tomcat:tomcat-jasper

3 results · Feed

• Medium 6.1
  CVE-2024-52318 Public exploit

  Apache Tomcat: Incorrect JSP tag recycling leads to XSS

  Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat10 Debian Maven
  Nov 18, 2024
• Critical 9.1
  CVE-2016-5018 EPSS 10%

  Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat

  In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Aug 10, 2017
• Medium —
  CVE-2014-0119

  Missing XML Validation in Apache Tomcat

  Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web applicatio…

  org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-catalina Ubuntu Maven
  May 31, 2014