https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:07:34.206346+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03597 bdu:2024-03597 2026-10-03T09:07:34.519443+00:00 bdu:2024-03597 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-45143 BIT-tomcat-2022-45143 — Apache Tomcat: JsonErrorReportValve escaping 2026-10-03T09:07:34.519508+00:00

Affected: Bitnami: tomcat

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0001 certfr-2023-avi-0001 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer un problème de sécurité… 2026-10-03T09:07:34.519571+00:00 certfr-2023-avi-0001 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 Withdrawn: CLEANSTART-2026-AJ47488 — When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Prot… 2026-10-03T09:07:34.519604+00:00

Withdrawn by the publisher.

Affected: CleanStart: tomcat10

Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-19668 EUVD-2026-19668 2026-10-03T09:07:34.519653+00:00 EUVD-2026-19668 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45143 fkie_cve-2022-45143 2026-10-03T09:07:34.519678+00:00

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.

 https://cve.radiocsirt.org/vuln/ghsa-rq2w-37h9-vg94 GHSA-rq2w-37h9-vg94 — Apache Tomcat improperly escapes input from JsonErrorReportValve 2026-10-03T09:07:34.519723+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-util

The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 does not escape the `type`, `message` or `description` values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.

 https://cve.radiocsirt.org/vuln/gsd-2022-45143 gsd-2022-45143 2026-10-03T09:07:34.519782+00:00 gsd-2022-45143 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12847-1 openSUSE-SU-2024:12847-1 — tomcat-9.0.43-16.1 on GA media 2026-10-03T09:07:34.519805+00:00

tomcat-9.0.43-16.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:1663 RHSA-2023:1663 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.2 release and security update 2026-10-03T09:07:34.519838+00:00

tomcat: request smuggling tomcat: JsonErrorReportValve injection

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45143 UBUNTU-CVE-2022-45143 2026-10-03T09:07:34.519876+00:00

Affected: Ubuntu:Pro:22.04:LTS: tomcat9

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0017 WID-SEC-W-2023-0017 — Apache Tomcat: Schwachstelle ermöglicht Manipulation von Daten 2026-10-03T09:07:34.519919+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Daten zu manipulieren.