org.apache.tomcat:tomcat-catalina vulnerabilities (Root)
19 vulnerabilities.
-
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: HTTP/2 request headers not validated 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled 9.1 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Client certificate verification bypass due to virtual host mapping 9.1 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS 5.3 Medium -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: console manipulation via escape sequences in log messages 9.6 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: session fixation via rewrite valve 6.5 Medium -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: DoS via integer overflow in multipart file upload 7.5 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows 8.4 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Security constraint bypass for pre/post-resources 7.5 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: FileUpload large number of parts with headers DoS 7.5 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Security constraint bypass for CGI scripts 7.3 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: RCE due to TOCTOU issue in JSP compilation 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Authentication bypass when using Jakarta Authentication API 9.8 Critical -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
org.apache.tomcat:tomcat-catalinaRoot Apache Tomcat: Open redirect with FORM authentication 6.1 Medium