tomcat:jasper@3.2.4

3.3.2

20 years ago

20 years ago

Direct Vulnerabilities

Known vulnerabilities in the tomcat:jasper package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Access Restriction Bypass Affected versions of this package are vulnerable to Access Restriction Bypass. It was discovered that a malicious web application could bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.	[3.2.4,3.3.2]
H Access Restriction Bypass Affected versions of this package are vulnerable to Access Restriction Bypass. It was discovered that a malicious web application could bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications. How to fix Access Restriction Bypass? Upgrade `tomcat:jasper` to version 3.3.3 or higher.	[,3.3.3)