35 matches found
cve-2025-24813_poc
cve-2025-24813poc Script de verificación para cve-2025-24813 Versiones afectadas 9.0.0.M1 = tomcat = 9.0.98 10.1.0-M1 = tomcat = 10.1.34 11.0.0-M1 = tomcat = 11.0.2 Método de detección python .\CVE-2025-24813-poc.py -u url Descargo de responsabilidad Este script se proporciona únicamente con fine...
Astra Linux – Vulnerability in Tomcat9
Improper neutralization of script-related HTML tags in a web page constitutes an XSS vulnerability in the number guessing example for Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.0.M1 through 9.0.118, 8.5.0 through...
OPENSUSE-SU-2026:11759-1 tomcat-9.0.121-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed...
BIT-TOMCAT-2020-1938
When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...
BIT-TOMCAT-2023-28708 Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 10.1.0 to 10.1.5, 9.0.0 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the...
[SECURITY] [DLA 4244-1] tomcat9 security update
Debian LTS Advisory DLA-4244-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 22, 2025 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.107-0+deb11u1 CVE ID : CVE-2024-34750 CVE-2024-54677 CVE-2025-31650 CVE-2025-31651 CVE-2025-46701 CVE-2025-4897...
DLA-4244-1 tomcat9 - security update
Bulletin has no description...
[SECURITY] [DLA 4108-1] tomcat9 security update
Debian LTS Advisory DLA-4108-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 02, 2025 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.43-2deb11u12 CVE ID : CVE-2025-24813 A security vulnerability was found in Tomcat 9, a Java based web server a...
Debian dla-4108 : libtomcat9-embed-java - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4108 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4108-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-4017 : libtomcat9-embed-java - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4017 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4017-1 [email protected]...
[SECURITY] [DLA 4017-1] tomcat9 security update
Debian LTS Advisory DLA-4017-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 17, 2025 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.43-2deb11u11 CVE ID : CVE-2024-21733 CVE-2024-38286 CVE-2024-50379 CVE-2024-52316 CVE-2024-56337 Several...
GHSA-V682-8VV8-VPWR vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-7W75-32CG-R6G2 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-V682-8VV8-VPWR vulnerabilities
Vulnerabilities for packages: tomcat...
CVE-2024-23672 vulnerabilities
Vulnerabilities for packages: tomcat...
CVE-2024-23672 vulnerabilities
Vulnerabilities for packages: tomcat...
CVE-2024-24549 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: skaffold, scorecard, metacontroller, gitness, ko, envoy-ratelimit, flux-helm-controller, secrets-store-csi-driver, dgraph, nri-prometheus, dynamic-localpv-provisioner, kubernetes-csi-livenessprobe, gke-gcloud-auth-plugin, metrics-server, nodetaint, kubewatch, gobuste...
Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-002)
The version of tomcat installed on the remote host is prior to 9.0.71-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2TOMCAT9-2023-002 advisory. If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore...
CVE-2023-28708
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure...