org.apache.tomcat:tomcat-util

2 results · Clear filters · Feed

• Medium 5.3
  CVE-2023-42795

  Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

  Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomc…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Oct 10, 2023
• Medium —
  CVE-2014-0099

  Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat

  Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Conte…

  org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-util Ubuntu Maven
  May 31, 2014