CVE-2022-45143 Apache Tomcat: JsonErrorReportValve escaping

2023-01-0318:12:28

CWE-116

apache

github.com

apache tomcat

jsonerrorreportvalve

security vulnerability

cve-2022-45143

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.

CNA Affected

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Tomcat",
    "versions": [
      {
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver",
        "lessThanOrEqual": "10.1.1"
      },
      {
        "status": "affected",
        "version": "9.0.40",
        "versionType": "semver",
        "lessThanOrEqual": "9.0.68"
      },
      {
        "status": "affected",
        "version": "8.5.83"
      }
    ],
    "defaultStatus": "affected"
  }
]