{"schema":"threatline.record/2","record":{"id":"CVE-2023-46589","aliases":["BIT-tomcat-2023-46589","GHSA-fccv-jmmp-qg76"],"summary":"Apache Tomcat Improper Input Validation vulnerability","details":"Improper Input Validation vulnerability in Apache Tomcat. Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82, and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Older, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.","categories":["Web servers"],"product":"org.apache.tomcat:tomcat-catalina","vendor":"Apache Software Foundation","ecosystem":"maven","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"range":">= 11.0.0-M1, < 11.0.0-M11"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"range":">= 10.1.0-M1, < 10.1.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"range":">= 9.0.0-M1, < 9.0.83"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"range":">= 8.5.0, < 8.5.96"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"range":">= 11.0.0-M1, < 11.0.0-M11"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"range":">= 10.1.0-M1, < 10.1.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"range":">= 9.0.0-M1, < 9.0.83"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"range":">= 8.5.0, < 8.5.96"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-coyote"},"range":">= 11.0.0-M1, < 11.0.0-M11"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-46589","source_modified_at":"2025-10-29T12:00:24.622Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Apache Tomcat","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"11.0.0-M10","status":"affected","version":"11.0.0-M1","versionType":"semver"},{"lessThanOrEqual":"10.1.15","status":"affected","version":"10.1.0-M1","versionType":"semver"},{"lessThanOrEqual":"9.0.82","status":"affected","version":"9.0.0-M1","versionType":"semver"},{"lessThanOrEqual":"8.5.95","status":"affected","version":"8.5.0","versionType":"semver"},{"lessThan":"8.5.0","status":"unknown","version":"3","versionType":"semver"},{"lessThanOrEqual":"10.0.27","status":"unknown","version":"10.0.0-M1","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"events":[{"introduced":"11.0.0-M1"},{"fixed":"11.0.0-M11"}],"type":"ECOSYSTEM"}],"versions":["11.0.0-M1","11.0.0-M10","11.0.0-M3","11.0.0-M4","11.0.0-M5","11.0.0-M6","11.0.0-M7","11.0.0-M9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"events":[{"introduced":"10.1.0-M1"},{"fixed":"10.1.16"}],"type":"ECOSYSTEM"}],"versions":["10.1.0","10.1.0-M1","10.1.0-M10","10.1.0-M11","10.1.0-M12","10.1.0-M14","10.1.0-M15","10.1.0-M16","10.1.0-M17","10.1.0-M2","10.1.0-M4","10.1.0-M5","10.1.0-M6","10.1.0-M7","10.1.0-M8","10.1.1","10.1.10","10.1.11","10.1.12","10.1.13","10.1.14","10.1.15","10.1.2","10.1.4","10.1.5","10.1.6","10.1.7","10.1.8","10.1.9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"events":[{"introduced":"9.0.0-M1"},{"fixed":"9.0.83"}],"type":"ECOSYSTEM"}],"versions":["9.0.0.M1","9.0.0.M10","9.0.0.M11","9.0.0.M13","9.0.0.M15","9.0.0.M17","9.0.0.M18","9.0.0.M19","9.0.0.M20","9.0.0.M21","9.0.0.M22","9.0.0.M25","9.0.0.M26","9.0.0.M27","9.0.0.M3","9.0.0.M4","9.0.0.M6","9.0.0.M8","9.0.0.M9","9.0.1","9.0.10","9.0.11","9.0.12","9.0.13","9.0.14","9.0.16","9.0.17","9.0.19","9.0.2","9.0.20","9.0.21","9.0.22","9.0.24","9.0.26","9.0.27","9.0.29","9.0.30","9.0.31","9.0.33","9.0.34","9.0.35","9.0.36","9.0.37","9.0.38","9.0.39","9.0.4","9.0.40","9.0.41","9.0.43","9.0.44"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"events":[{"introduced":"8.5.0"},{"fixed":"8.5.96"}],"type":"ECOSYSTEM"}],"versions":["8.5.0","8.5.11","8.5.12","8.5.13","8.5.14","8.5.15","8.5.16","8.5.19","8.5.2","8.5.20","8.5.21","8.5.23","8.5.24","8.5.27","8.5.28","8.5.29","8.5.3","8.5.30","8.5.31","8.5.32","8.5.33","8.5.34","8.5.35","8.5.37","8.5.38","8.5.39","8.5.4","8.5.40","8.5.41","8.5.42","8.5.43","8.5.45","8.5.46","8.5.47","8.5.49","8.5.5","8.5.50","8.5.51","8.5.53","8.5.54","8.5.55","8.5.56","8.5.57","8.5.58","8.5.59","8.5.6","8.5.60","8.5.61","8.5.63","8.5.64"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"events":[{"introduced":"11.0.0-M1"},{"fixed":"11.0.0-M11"}],"type":"ECOSYSTEM"}],"versions":["11.0.0-M1","11.0.0-M10","11.0.0-M3","11.0.0-M4","11.0.0-M5","11.0.0-M6","11.0.0-M7","11.0.0-M9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"events":[{"introduced":"10.1.0-M1"},{"fixed":"10.1.16"}],"type":"ECOSYSTEM"}],"versions":["10.1.0","10.1.0-M1","10.1.0-M10","10.1.0-M11","10.1.0-M12","10.1.0-M14","10.1.0-M15","10.1.0-M16","10.1.0-M17","10.1.0-M2","10.1.0-M4","10.1.0-M5","10.1.0-M6","10.1.0-M7","10.1.0-M8","10.1.1","10.1.10","10.1.11","10.1.12","10.1.13","10.1.14","10.1.15","10.1.2","10.1.4","10.1.5","10.1.6","10.1.7","10.1.8","10.1.9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"events":[{"introduced":"9.0.0-M1"},{"fixed":"9.0.83"}],"type":"ECOSYSTEM"}],"versions":["9.0.0.M1","9.0.0.M10","9.0.0.M11","9.0.0.M13","9.0.0.M15","9.0.0.M17","9.0.0.M18","9.0.0.M19","9.0.0.M20","9.0.0.M21","9.0.0.M22","9.0.0.M25","9.0.0.M26","9.0.0.M27","9.0.0.M3","9.0.0.M4","9.0.0.M6","9.0.0.M8","9.0.0.M9","9.0.1","9.0.10","9.0.11","9.0.12","9.0.13","9.0.14","9.0.16","9.0.17","9.0.19","9.0.2","9.0.20","9.0.21","9.0.22","9.0.24","9.0.26","9.0.27","9.0.29","9.0.30","9.0.31","9.0.33","9.0.34","9.0.35","9.0.36","9.0.37","9.0.38","9.0.39","9.0.4","9.0.40","9.0.41","9.0.43","9.0.44"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"events":[{"introduced":"8.5.0"},{"fixed":"8.5.96"}],"type":"ECOSYSTEM"}],"versions":["8.5.0","8.5.11","8.5.12","8.5.13","8.5.14","8.5.15","8.5.16","8.5.19","8.5.2","8.5.20","8.5.21","8.5.23","8.5.24","8.5.27","8.5.28","8.5.29","8.5.3","8.5.30","8.5.31","8.5.32","8.5.33","8.5.34","8.5.35","8.5.37","8.5.38","8.5.39","8.5.4","8.5.40","8.5.41","8.5.42","8.5.43","8.5.45","8.5.46","8.5.47","8.5.49","8.5.5","8.5.50","8.5.51","8.5.53","8.5.54","8.5.55","8.5.56","8.5.57","8.5.58","8.5.59","8.5.6","8.5.60","8.5.61","8.5.63","8.5.64"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-coyote","purl":"pkg:maven/org.apache.tomcat/tomcat-coyote"},"ranges":[{"events":[{"introduced":"11.0.0-M1"},{"fixed":"11.0.0-M11"}],"type":"ECOSYSTEM"}],"versions":["11.0.0-M1","11.0.0-M10","11.0.0-M3","11.0.0-M4","11.0.0-M5","11.0.0-M6","11.0.0-M7","11.0.0-M9"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"version":"11.0.0-M11"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"version":"10.1.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"version":"9.0.83"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-catalina"},"version":"8.5.96"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"version":"11.0.0-M11"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"version":"10.1.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"version":"9.0.83"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat.embed:tomcat-embed-core"},"version":"8.5.96"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:14:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.apache.tomcat:tomcat-coyote"},"version":"11.0.0-M11"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"version":"11.0.0-M11"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"version":"10.1.16"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"version":"9.0.83"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-catalina","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"version":"8.5.96"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"version":"11.0.0-M11"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"version":"10.1.16"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"version":"9.0.83"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat.embed:tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"version":"8.5.96"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","source_modified_at":"2026-10-02T20:30:05.627846032Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat-coyote","purl":"pkg:maven/org.apache.tomcat/tomcat-coyote"},"version":"11.0.0-M11"}],"cvss":7.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.02651,"percentile":0.85529,"score_date":"2026-10-23"},"published_at":"2023-11-28T15:31:52.366Z","modified_at":"2026-10-02T20:30:05.627846032Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-02T20:14:55Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2023-46589","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2025-10-29T12:00:24.622Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-02T20:30:05.627846032Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2023-46589","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46589","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041b","source":"GitHub Advisory Database"},{"url":"https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd","source":"GitHub Advisory Database"},{"url":"https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642","source":"GitHub Advisory Database"},{"url":"https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08","source":"GitHub Advisory Database"},{"url":"https://tomcat.apache.org/security-10.html","source":"GitHub Advisory Database"},{"url":"https://tomcat.apache.org/security-11.html","source":"GitHub Advisory Database"},{"url":"https://tomcat.apache.org/security-8.html","source":"GitHub Advisory Database"},{"url":"https://tomcat.apache.org/security-9.html","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.openwall.com/lists/oss-security/2023/11/28/2","tags":["x_transferred"]},{"source":"CVE List","url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231214-0009","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://security.netapp.com/advisory/ntap-20231214-0009/","tags":["x_transferred"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2024-07-11T16:04:24.661745Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-02T20:30:05.627846032Z","content_hash":"2b97460148f48b281ef803a2605dc78b50cfd950d8d1c32aeb3765b1a0272b01"}}