https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:32:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-03597 bdu:2024-03597 https://cve.radiocsirt.org/vuln/bdu:2024-03597 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-45143 <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> https://cve.radiocsirt.org/vuln/bit-tomcat-2022-45143 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0001 certfr-2023-avi-0001 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0001 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tomcat10</p> <p>Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tomcat10</p> <p>Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 https://cve.radiocsirt.org/vuln/euvd-2026-19668 EUVD-2026-19668 https://cve.radiocsirt.org/vuln/euvd-2026-19668 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45143 <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45143 https://cve.radiocsirt.org/vuln/ghsa-rq2w-37h9-vg94 <p><strong>Affected:</strong> Maven: org.apache.tomcat.embed:tomcat-embed-core, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-util</p> <p>The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 does not escape the `type`, `message` or `description` values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat.embed:tomcat-embed-core, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-util</p> <p>The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 does not escape the `type`, `message` or `description` values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> https://cve.radiocsirt.org/vuln/ghsa-rq2w-37h9-vg94 https://cve.radiocsirt.org/vuln/gsd-2022-45143 gsd-2022-45143 https://cve.radiocsirt.org/vuln/gsd-2022-45143 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12847-1 <p>tomcat-9.0.43-16.1 on GA media</p> <p>tomcat-9.0.43-16.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12847-1 https://cve.radiocsirt.org/vuln/rhsa-2023:1663 <p>tomcat: request smuggling tomcat: JsonErrorReportValve injection</p> <p>tomcat: request smuggling tomcat: JsonErrorReportValve injection</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1663 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45143 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: tomcat9</p> <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: tomcat9</p> <p>The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45143 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0017 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0017