Read the docs
Red Hat Security Advisory

RHSA-2021:3425

Red Hat support for Spring Boot 2.3.10 security update

Released 2021-09-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2021-07400 CVE-2021-25122 · GHSA-j39c-c8hj-x4j3

Apache Tomcat h2c request mix-up

Priority MEDIUM 56

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18114 Published 2021-03-01 Partial fix · 10.0.2, 9.0.42 +3 CWE-200
TI-2021-06414 CVE-2021-24122 · GHSA-2rvv-w9r2-rg7m

Apache Tomcat information disclosure

Priority MEDIUM 53

When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code discl…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.22852 Published 2021-01-14 Partial fix · 10.0.0-M10, 9.0.40 +3 CWE-200
TI-2021-07568 CVE-2021-25329 · GHSA-jgwr-3qm3-26f3

Incomplete fix for CVE-2020-9484

Priority MEDIUM 45

The fix for CVE-2020-9484 was incomplete.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.09491 Published 2021-03-01 Partial fix · 10.0.0, 9.0.41 +4 CWE-502
TI-2020-16867 CVE-2020-27782 · GHSA-rhcw-wjcm-9h6g

Uncontrolled resource consumption in Undertow

Priority LOW 36

A flaw was found in the Undertow AJP connector.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01375 Published 2021-02-23 Partial fix · 2.1.5, 2.0.33 CWE-400