https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:56:23.391563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-45143 CVE-2022-45143 — Apache Tomcat: JsonErrorReportValve escaping 2026-10-05T21:56:23.406538+00:00

Affected: Apache Software Foundation Apache Tomcat

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.