CVE-2022-45143

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...

Apache Tomcat 注入漏洞

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server. The program implements the Servlet and JavaServer Page JSP support. An injection vulnerability exists in Apache Tomcat versions 8.5.83, 9.0.40 through 9.0.68, and 10.1.0-M1 through 10.1.1, which...

Apache Tomcat Request Smuggling Vulnerability (Oct 2022) - Windows

Apache Tomcat is prone to a request smuggling vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...