CVE-2024-52318 Apache Tomcat: Incorrect JSP tag recycling leads to XSS

🗓️ 18 Nov 2024 12:21:39Reported by apacheType

Incorrect object recycling in Apache Tomcat leads to XSS vulnerabilit

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to object recycling and reuse vulnerability in Apache Tomcat (CVE-2024-52318)	7 Feb 202519:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	23 Jun 202513:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build addresses multiple vulnerabilities.	25 Jun 202511:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	24 Jun 202506:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-52316, CVE-2024-52317, CVE-2024-52318)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-52318) affects Power HMC.	18 Feb 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	11 Dec 202418:44	–	ibm
Tenable Nessus	Apache Tomcat < 11.0.1 Vulnerability	18 Nov 202400:00	–	nessus
Tenable Nessus	Apache Tomcat < 10.1.33 Vulnerability	18 Nov 202400:00	–	nessus
Tenable Nessus	Apache Tomcat < 9.0.97 Vulnerability	18 Nov 202400:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.1.31",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.0.96",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9

18 Nov 2024 12:21Current

EPSS0.01676