Package · Maven

org.apache.tomcat.embed:tomcat-embed-jasper

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2024-52318 Public exploit

Apache Tomcat: Incorrect JSP tag recycling leads to XSS

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat10 Debian Maven

Nov 18, 2024