CVE-2023-46589BIT-tomcat-2023-46589GHSA-fccv-jmmp-qg76
org.apache.tomcat:tomcat-catalina: Apache Tomcat Improper Input Validation vulnerability
Apache Software Foundation org.apache.tomcat:tomcat-catalinamavenWeb servers
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)2.65%Chance of exploitation activity in the next 30 days, higher than 85% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 11.0.0-M11org.apache.tomcat:tomcat-catalina, mavenGitHub
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>11.0.0-M11</version></dependency> - 10.1.16org.apache.tomcat:tomcat-catalina, mavenGitHub
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>10.1.16</version></dependency> - 9.0.83org.apache.tomcat:tomcat-catalina, mavenGitHub
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>9.0.83</version></dependency> - 8.5.96org.apache.tomcat:tomcat-catalina, mavenGitHub
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>8.5.96</version></dependency> - 11.0.0-M11org.apache.tomcat.embed:tomcat-embed-core, mavenGitHub
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>11.0.0-M11</version></dependency> - 10.1.16org.apache.tomcat.embed:tomcat-embed-core, mavenGitHub
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>10.1.16</version></dependency>
Show all 18 fixed versions
- 9.0.83org.apache.tomcat.embed:tomcat-embed-core, mavenGitHub
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>9.0.83</version></dependency> - 8.5.96org.apache.tomcat.embed:tomcat-embed-core, mavenGitHub
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>8.5.96</version></dependency> - 11.0.0-M11org.apache.tomcat:tomcat-coyote, mavenGitHub
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-coyote</artifactId><version>11.0.0-M11</version></dependency> - 11.0.0-M11org.apache.tomcat:tomcat-catalina, MavenOSV
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>11.0.0-M11</version></dependency> - 10.1.16org.apache.tomcat:tomcat-catalina, MavenOSV
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>10.1.16</version></dependency> - 9.0.83org.apache.tomcat:tomcat-catalina, MavenOSV
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>9.0.83</version></dependency> - 8.5.96org.apache.tomcat:tomcat-catalina, MavenOSV
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-catalina</artifactId><version>8.5.96</version></dependency> - 11.0.0-M11org.apache.tomcat.embed:tomcat-embed-core, MavenOSV
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>11.0.0-M11</version></dependency> - 10.1.16org.apache.tomcat.embed:tomcat-embed-core, MavenOSV
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>10.1.16</version></dependency> - 9.0.83org.apache.tomcat.embed:tomcat-embed-core, MavenOSV
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>9.0.83</version></dependency> - 8.5.96org.apache.tomcat.embed:tomcat-embed-core, MavenOSV
<dependency><groupId>org.apache.tomcat.embed</groupId><artifactId>tomcat-embed-core</artifactId><version>8.5.96</version></dependency> - 11.0.0-M11org.apache.tomcat:tomcat-coyote, MavenOSV
<dependency><groupId>org.apache.tomcat</groupId><artifactId>tomcat-coyote</artifactId><version>11.0.0-M11</version></dependency>
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Improper Input Validation vulnerability in Apache Tomcat. Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82, and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Older, EOL versions may also be affected.
Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
Text from GitHub Advisory Database
Affected versions 306
- org.apache.tomcat:tomcat-catalina, maven>= 11.0.0-M1, < 11.0.0-M11GitHub
- org.apache.tomcat:tomcat-catalina, maven>= 10.1.0-M1, < 10.1.16GitHub
- org.apache.tomcat:tomcat-catalina, maven>= 9.0.0-M1, < 9.0.83GitHub
- org.apache.tomcat:tomcat-catalina, maven>= 8.5.0, < 8.5.96GitHub
- org.apache.tomcat.embed:tomcat-embed-core, maven>= 11.0.0-M1, < 11.0.0-M11GitHub
- org.apache.tomcat.embed:tomcat-embed-core, maven>= 10.1.0-M1, < 10.1.16GitHub
- org.apache.tomcat.embed:tomcat-embed-core, maven>= 9.0.0-M1, < 9.0.83GitHub
- org.apache.tomcat.embed:tomcat-embed-core, maven>= 8.5.0, < 8.5.96GitHub
- org.apache.tomcat:tomcat-coyote, maven>= 11.0.0-M1, < 11.0.0-M11GitHub
- Apache Tomcataffected: 11.0.0-M1 through 11.0.0-M10CVE List
- Apache Tomcataffected: 10.1.0-M1 through 10.1.15CVE List
- Apache Tomcataffected: 9.0.0-M1 through 9.0.82CVE List
- Apache Tomcataffected: 8.5.0 through 8.5.95CVE List
- Apache Tomcatunknown: 3 before 8.5.0CVE List
- Apache Tomcatunknown: 10.0.0-M1 through 10.0.27CVE List
- org.apache.tomcat:tomcat-catalina, Mavenfrom 11.0.0-M1, fixed in 11.0.0-M11OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M1OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M10OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M3OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M4OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M5OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M6OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M7OSV
- org.apache.tomcat:tomcat-catalina, Maven11.0.0-M9OSV
- org.apache.tomcat:tomcat-catalina, Mavenfrom 10.1.0-M1, fixed in 10.1.16OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M1OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M10OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M11OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M12OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M14OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M15OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M16OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M17OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M2OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M4OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M5OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M6OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M7OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.0-M8OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.1OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.10OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.11OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.12OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.13OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.14OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.15OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.2OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.4OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.5OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.6OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.7OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.8OSV
- org.apache.tomcat:tomcat-catalina, Maven10.1.9OSV
- org.apache.tomcat:tomcat-catalina, Mavenfrom 9.0.0-M1, fixed in 9.0.83OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M1OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M10OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M11OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M13OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M15OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M17OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M18OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M19OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M20OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M21OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M22OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M25OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M26OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M27OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M3OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M4OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M6OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M8OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.0.M9OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.1OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.10OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.11OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.12OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.13OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.14OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.16OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.17OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.19OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.2OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.20OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.21OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.22OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.24OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.26OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.27OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.29OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.30OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.31OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.33OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.34OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.35OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.36OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.37OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.38OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.39OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.4OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.40OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.41OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.43OSV
- org.apache.tomcat:tomcat-catalina, Maven9.0.44OSV
- org.apache.tomcat:tomcat-catalina, Mavenfrom 8.5.0, fixed in 8.5.96OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.0OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.11OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.12OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.13OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.14OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.15OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.16OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.19OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.2OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.20OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.21OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.23OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.24OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.27OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.28OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.29OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.3OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.30OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.31OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.32OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.33OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.34OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.35OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.37OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.38OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.39OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.4OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.40OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.41OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.42OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.43OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.45OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.46OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.47OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.49OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.5OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.50OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.51OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.53OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.54OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.55OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.56OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.57OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.58OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.59OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.6OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.60OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.61OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.63OSV
- org.apache.tomcat:tomcat-catalina, Maven8.5.64OSV
- org.apache.tomcat.embed:tomcat-embed-core, Mavenfrom 11.0.0-M1, fixed in 11.0.0-M11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M1OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M10OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M3OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M5OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M6OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M7OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven11.0.0-M9OSV
- org.apache.tomcat.embed:tomcat-embed-core, Mavenfrom 10.1.0-M1, fixed in 10.1.16OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M1OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M10OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M12OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M14OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M15OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M16OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M17OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M2OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M5OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M6OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M7OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.0-M8OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.1OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.10OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.12OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.13OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.14OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.15OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.2OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.5OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.6OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.7OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.8OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven10.1.9OSV
- org.apache.tomcat.embed:tomcat-embed-core, Mavenfrom 9.0.0-M1, fixed in 9.0.83OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M1OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M10OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M13OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M15OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M17OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M18OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M19OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M20OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M21OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M22OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M25OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M26OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M27OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M3OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M6OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M8OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.0.M9OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.1OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.10OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.12OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.13OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.14OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.16OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.17OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.19OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.2OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.20OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.21OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.22OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.24OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.26OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.27OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.29OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.30OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.31OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.33OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.34OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.35OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.36OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.37OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.38OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.39OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.40OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.41OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.43OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven9.0.44OSV
- org.apache.tomcat.embed:tomcat-embed-core, Mavenfrom 8.5.0, fixed in 8.5.96OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.0OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.11OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.12OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.13OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.14OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.15OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.16OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.19OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.2OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.20OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.21OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.23OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.24OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.27OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.28OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.29OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.3OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.30OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.31OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.32OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.33OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.34OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.35OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.37OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.38OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.39OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.4OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.40OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.41OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.42OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.43OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.45OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.46OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.47OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.49OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.5OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.50OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.51OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.53OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.54OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.55OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.56OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.57OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.58OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.59OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.6OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.60OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.61OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.63OSV
- org.apache.tomcat.embed:tomcat-embed-core, Maven8.5.64OSV
- org.apache.tomcat:tomcat-coyote, Mavenfrom 11.0.0-M1, fixed in 11.0.0-M11OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M1OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M10OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M3OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M4OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M5OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M6OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M7OSV
- org.apache.tomcat:tomcat-coyote, Maven11.0.0-M9OSV
References 15
- github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041bFixvia GitHub
- github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebdFixvia GitHub
- github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642Fixvia GitHub
- github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08Fixvia GitHub
- lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxrAdvisoryvia CVE List
- tomcat.apache.org/security-10.htmlAdvisoryvia GitHub
- tomcat.apache.org/security-11.htmlAdvisoryvia GitHub
- tomcat.apache.org/security-8.htmlAdvisoryvia GitHub
- tomcat.apache.org/security-9.htmlAdvisoryvia GitHub
- openwall.com/lists/oss-security/2023/11/28/2Advisoryvia CVE List
- security.netapp.com/advisory/ntap-20231214-0009Advisoryvia GitHub
- github.com/advisories/GHSA-fccv-jmmp-qg76Advisoryvia GitHub
- security.netapp.com/advisory/ntap-20231214-0009/Advisoryvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2023-46589Referencevia GitHub
- lists.debian.org/debian-lts-announce/2024/01/msg00001.htmlReferencevia CVE List