org.apache.tomcat:tomcat-catalina vulnerabilities (Maven)
44 vulnerabilities.
org.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Redirect after FORM auth may bypass method specific constraints9.1 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Limited replay attack possible with DIGEST authentication9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Bypass longest prefix security constraint9.1 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Security constraints for default servlet ignored method6.5 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Bad ornext processing in RewriteValve7.3 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind7.3 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Security constraints not correctly applied9.1 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: AJP secret compared in non-constant time3.7 Loworg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: LockOutRealm treats user names as case-sensitive7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Digest authenticator will authenticate any unknown user9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: WebSocket authentication header exposure7.3 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Incomplete escaping of JSON access logs7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Occasionally open redirect6.1 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: session fixation via rewrite valve6.5 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: DoS via integer overflow in multipart file upload7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows8.4 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Security constraint bypass for pre/post-resources7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: FileUpload large number of parts with headers DoS7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Security constraint bypass for CGI scripts7.3 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: Open redirect with FORM authentication6.1 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat:tomcat-catalinaMavenApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat: JsonErrorReportValve escaping7.5 Highorg.apache.tomcat:tomcat-catalinaMavenPotential remote code execution in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-catalinaMavenCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat:tomcat-catalinaMavenUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Highorg.apache.tomcat:tomcat-catalinaMavenExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaMavenExposure of Resource to Wrong Sphere in Apache Tomcat9.1 Criticalorg.apache.tomcat:tomcat-catalinaMavenApache Tomcat Improper Access Control vulnerability9.8 Criticalorg.apache.tomcat:tomcat-catalinaMavenImproper Access Control in Apache Tomcat8.1 Highorg.apache.tomcat:tomcat-catalinaMavenMissing XML Validation in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-catalinaMavenImproper Input Validation in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-catalinaMavenImproper Authentication in Apache Tomcat5.0 Medium