Apache Tomcat CVE-2023-28709

h3. Issue summary

Apache Tomcat should be upgraded to 9.0.74 or a later version to fix [CVE-2023-28709|https://nvd.nist.gov/vuln/detail/CVE-2023-28709]
h3. Environment

• Bitbucket 8.10.x and 8.11

h3. Steps to Reproduce

• Check the Apache Tomcat version on {{pom.xml}}

h3. Expected Results

• Bitbucket 8.10 and 8.11: apache-tomcat 9.0.74 and later

h3. Actual Results

• Bitbucket 8.10: apache-tomcat-9.0.73 and earlier
• Bitbucket 8.11: apache-tomcat-9.0.73 and earlier