Skip to content
OpenAdvisories

Package · Maven

org.apache.tomcat.embed:tomcat-embed-websocket

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-13935 Public exploit EPSS 87%

    Infinite Loop in Apache Tomcat

    The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payl…

    org.apache.tomcat:tomcat tomcat8 tomcat9 tomcat9 Debian Ubuntu Maven