tomcat:ELEvaluationFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6083313104388096 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

tomcat:ELEvaluationFuzzer: Security exception in org.apache.el.parser.AstLambdaExpression.setNestedState

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=5768153378652160 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tomcat:ELEvaluationFuzzer: Security exception in java.base/java.lang.String.repeat

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=5485940386168832 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Anatomy of an Attack

In today's rapidly evolving cyber threat landscape, organizations face increasingly sophisticated attacks targeting their applications. Understanding these threats and the technologies designed to combat them is crucial. This article delves into the mechanics of a common application attack, using...

tomcat:ELEvaluationFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=5679778630074368 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

tomcat:ELEvaluationFuzzer: Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

Detailed Report: https://oss-fuzz.com/testcase?key=6511021544308736 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tomcat:ELEvaluationFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=5499645836525568 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tomcat:ELEvaluationFuzzer: Security exception in jaz.Zer.<clinit>

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=4839550299537408 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

SecurityManager Bypass

Apache Tomcat Jasper 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 allows the bypass a SecurityManager protection mechanism by using a web application that uses the incorrect privileges during an EL evaluation. This is caused because it does not take into account the possibility of ...

CVE-2014-7810

The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanis...

CVE-2014-7810: Improper Access Control

The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanis...

CVE-2011-2730: Spring Framework Information Disclosure

CVE-2011-2730: Spring Framework Information Disclosure Severity: Variable depending on application. Likely to be low to moderate, may be important. Version affected: 3.0.0 to 3.0.5 2.5.0 to 2.5.6.SEC02 community releases 2.5.0 to 2.5.7.SR01 subscription customers Earlier, unsupported versions may...