Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Apache Tomcat — DSA-3974 Clear all filters
TI-2017-05311 CVE-2017-7675 · GHSA-68g5-8q7f-m384

Path traversal in Apache Tomcat

Priority MEDIUM 45

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1014 Published 2017-08-11 Fixed in 9.0.0.M22, 8.5.16 CWE-22
TI-2017-05310 CVE-2017-7674 · GHSA-73rx-3f9r-x949

Insufficient verification of data authenticity in Apache Tomcat

Priority LOW 31

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.08037 Published 2017-08-11 Partial fix · 9.0.0.M22, 8.5.16 +2 CWE-345