CVE-2022-30929

CVE-2022-30929 CVE-2022-30929 POC Suggested description Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper. Vulnerability Type Insecure Permissions Vendor of Product github;gitee Affected Product Code Base...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.106), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.106) potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.106)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.106 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.106 -...

com.51degrees:geo-location.web.examples.mvc (>=4.4.26, <=4.4.28), com.51degrees:geo-location.web.examples.servlet (>=4.4.26, <=4.4.28) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.98)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.26, =4.4.26, =4.4.26,...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.57.0, <=0.58.1), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.57.0, <=0.58.1) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.49)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.57.0, =0.57.0, =0.58.1 -...

com.aceql:aceql-http (6.3), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.60) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.60)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.60 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http 6.3 - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.6...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

ch.rasc:embeddedtc (2.2), com.github.jsimone:webapp-runner (8.0.18.0-m1) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.2 - com.github.jsimone:webapp-runner 8.0.18.0-m1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.5), org.apache.tomcat.embed:tomcat-embed-websocket (8.0.5) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.5)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.5 -...

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

org.apache.ranger:embeddedwebserver (2.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.105) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.105 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.ranger:embeddedwebserver 2.1.0 -...

com.earldouglas:war-runner (>=5.0.0-m5_3.1, <=5.2.3_3.1), com.heroku:webapp-runner (>=8.5.68.0, <=8.5.68.1) +10 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.68)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.earldouglas:war-runner =5.0.0-m53.1, =8.5.68.0, =8.5.68.0, =8.5.68.0,...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc5) potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc5)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.0-rc5 Source cves:...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

net.gcolin.httpquery:httpquery-examples (1.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.25) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.25)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - net.gcolin.httpquery:httpquery-examples 1.0 -...

com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.23) potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.23)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.23 Source cves: CVE-2026-435...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

ch.rasc:embeddedtc (1.26), com.github.shiver-me-timbers:smt-http-mock-tomcat7 (>=1.0, <=1.1) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.69)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.69 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.26 - com.github.shiver-me-timbers:smt-http-mock-tomcat7...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.70), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.70) potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.70 -...