Read the docs
Red Hat Security Advisory

RHSA-2012:0345

jbossweb security and bug fix update

Released 2012-03-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 36

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10478 Published 2012-01-19 Fixed in 5.5.35, 6.0.34 +1 CWE-189