Read the docs
Red Hat Security Advisory

RHSA-2024:0474

tomcat security update

Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2023-24449 CVE-2023-45648 · GHSA-r6j3-px5g-cq3x

Apache Tomcat: Trailer header parsing too lenient

Priority LOW 39

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05883 Published 2023-10-10 Partial fix · 11.0.0-M12, 10.1.14 +2 CWE-20
TI-2023-21704 CVE-2023-41080 · GHSA-q3mw-pvr8-9ggc

Apache Tomcat: Open redirect with FORM authentication

Priority LOW 37

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06459 Published 2023-08-25 Partial fix · 11.0.0-M11, 10.1.13 +2 CWE-601
TI-2023-22886 CVE-2023-42795 · GHSA-g8pj-r55q-5c2v

Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Priority LOW 35

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02515 Published 2023-10-10 Partial fix · 11.0.0-M12, 10.1.14 +2 CWE-459