org.apache.tomcat:tomcat@8.0.49 vulnerabilities
latest version
11.0.8
latest non vulnerable version
first published
12 years ago
latest version published
1 months ago
licenses detected
- [7.0.35,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.tomcat:tomcat package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Denial of Service (DoS). When Tomcat is configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially-crafted packet could be used to trigger an infinite loop resulting in a denial of service. How to fix Denial of Service (DoS)? Upgrade | [10.0.0,10.0.4)[8.0.0,8.5.64)[9.0.0,9.0.44) |
org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Improper Access Control. It did not protect applications from the presence of untrusted client data in the How to fix Improper Access Control? Upgrade | [7.35,8.5.5) |