Non notée
CVE-2022-45143 The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type,…
Description
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Tomcat 10.1 | 10.1.0-M1 → 10.1.1 | Pas de correctif indiqué |
| Apache Tomcat 9.0 | 9.0.40 → 9.0.68 | Pas de correctif indiqué |
| Apache Tomcat | 8.5.83 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
- security.gentoo.org security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Tomcat
Les 141 CVE de Apache Tomcat →
CVE-2026-103119
Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body…
Non notée
CVE-2026-101356
Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous…
Non notée
CVE-2026-101296
A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with…
Non notée
CVE-2026-93446
Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently
Non notée