deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-p768-r2m2-8vjr
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 7.2.0, < 7.2.10.fp19
Patched in: 7.2.10.fp19

Summary: Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module

Details:
A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification before 3.0.9 from Liferay Portal (7.2.1 through 7.4.2), and Liferay DXP 7.2 before fix pack 19, and 7.3 before update 4 allows remote attackers to inject arbitrary web script or HTML by sharing an asset with a crafted payload.
GitHub Security Advisory: GHSA-p768-r2m2-8vjr
Package: com.liferay:com.liferay.sharing.web (MAVEN)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 3.0.9
Patched in: 3.0.9

Summary: Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module

Details:
A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification before 3.0.9 from Liferay Portal (7.2.1 through 7.4.2), and Liferay DXP 7.2 before fix pack 19, and 7.3 before update 4 allows remote attackers to inject arbitrary web script or HTML by sharing an asset with a crafted payload.
GitHub Security Advisory: GHSA-hq29-vqg6-pjpw
Package: com.liferay:com.liferay.portal.search.web (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 1.0.3
Patched in: 1.0.3

Summary: Liferay Portal Vulnerable to XSS in Profile Search Functionality

Details:
Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay Portal Search Web before 1.0.3 from Liferay (before 7.0.0 CE RC1) allows remote attackers to inject arbitrary web script or HTML via the FirstName field.
GitHub Security Advisory: GHSA-6q67-5wvc-rmw9
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 7.0.3-ga4
Patched in: 7.0.3-ga4

Summary: Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display

Details:
XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.
GitHub Security Advisory: GHSA-75x7-w445-5gwr
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 7.0.3-ga4
Patched in: 7.0.3-ga4

Summary: Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title

Details:
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.
GitHub Security Advisory: GHSA-cvrj-cw2f-25qw
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 7.0.3-ga4
Patched in: 7.0.3-ga4

Summary: Liferay Portal Vulnerable to XSS via an Invalid portletId

Details:
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
GitHub Security Advisory: GHSA-jmjf-cmq5-7w25
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 7.0.3-ga4
Patched in: 7.0.3-ga4

Summary: Liferay Portal Vulnerable to XSS via a Crafted Redirect Field

Details:
XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp.
GitHub Security Advisory: GHSA-372h-p48h-xw8q
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: < 7.1.1
Patched in: 7.1.1

Summary: Liferay Portal Allows RCE via Deserialization of a JSON Payload

Details:
Liferay Portal CE 7.1.0 and earlier allows remote command execution because of deserialization of a JSON payload.
GitHub Security Advisory: GHSA-6qcg-28jh-hm7r
Package: com.liferay:com.liferay.blogs.web (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 6.0.139
Patched in: 6.0.139

Summary: Liferay Portal Reflected XSS in blogs-web

Details:
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the `modules/apps/blogs/blogs-web/src/main/resources/META-INF/resources/blogs/entry_cover_image_caption.jsp`.
GitHub Security Advisory: GHSA-25xr-qj8w-c4vf
Package: org.apache.tomcat:tomcat-coyote (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams

Details:
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100.

Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
GitHub Security Advisory: GHSA-wr62-c79q-cv37
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits

Details:
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
GitHub Security Advisory: GHSA-4j3c-42xv-3f84
Package: org.apache.tomcat:tomcat-util (MAVEN)
Severity: MODERATE (CVSS 7.5)
CWE: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Utilities is vulnerable to resource exhaustion when using the APR/Native connector

Details:
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections.

This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106.  The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 9.0.107, which fixes the issue.
GitHub Security Advisory: GHSA-wc4r-xq3c-5cf3
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - Security constraint bypass for pre/post-resources

Details:
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat.  When using PreResources or PostResources mounted other than at the root of the web application, it was possible to access those resources via an unexpected path. That path was likely not to be protected by the same security constraints as the expected path, allowing those security constraints to be bypassed.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
GitHub Security Advisory: GHSA-wc4r-xq3c-5cf3
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - Security constraint bypass for pre/post-resources

Details:
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat.  When using PreResources or PostResources mounted other than at the root of the web application, it was possible to access those resources via an unexpected path. That path was likely not to be protected by the same security constraints as the expected path, allowing those security constraints to be bypassed.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
GitHub Security Advisory: GHSA-h3gc-qfqq-6h8f
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - DoS in multipart upload

Details:
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
GitHub Security Advisory: GHSA-h3gc-qfqq-6h8f
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - DoS in multipart upload

Details:
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
GitHub Security Advisory: GHSA-h2fw-rfh5-95r3
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-178: Improper Handling of Case Sensitivity
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - CGI security constraint bypass

Details:
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.
GitHub Security Advisory: GHSA-h2fw-rfh5-95r3
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-178: Improper Handling of Case Sensitivity
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat - CGI security constraint bypass

Details:
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.
GitHub Security Advisory: GHSA-ff77-26x5-69cr
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-116: Improper Encoding or Escaping of Output, CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Rewrite rule bypass

Details:
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6, which fix the issue.
GitHub Security Advisory: GHSA-ff77-26x5-69cr
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-116: Improper Encoding or Escaping of Output, CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Rewrite rule bypass

Details:
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6, which fix the issue.
GitHub Security Advisory: GHSA-3p2h-wqq4-wf4h
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-459: Incomplete Cleanup, CWE-460: Improper Cleanup on Thrown Exception
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Denial of Service via invalid HTTP priority header

Details:
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service.

This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.90 though 8.5.100.

Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.
GitHub Security Advisory: GHSA-3p2h-wqq4-wf4h
Package: org.apache.tomcat:tomcat-coyote (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-459: Incomplete Cleanup, CWE-460: Improper Cleanup on Thrown Exception
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Denial of Service via invalid HTTP priority header

Details:
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service.

This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.90 though 8.5.100.

Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.
GitHub Security Advisory: GHSA-83qj-6fr2-vhqg
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-44: Path Equivalence: 'file.name' (Internal Dot), CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Details:
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:
- writes enabled for the default servlet (disabled by default)
- support for partial PUT (enabled by default)
- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads
- attacker knowledge of the names of security sensitive files being uploaded
- the security sensitive files also being uploaded via partial PUT

If all of the following were true, a malicious user was able to perform remote code execution:
- writes enabled for the default servlet (disabled by default)
- support for partial PUT (enabled by default)
- application was using Tomcat's file based session persistence with the default storage location
- application included a library that may be leveraged in a deserialization attack

Users are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.
GitHub Security Advisory: GHSA-83qj-6fr2-vhqg
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-44: Path Equivalence: 'file.name' (Internal Dot), CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Details:
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:
- writes enabled for the default servlet (disabled by default)
- support for partial PUT (enabled by default)
- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads
- attacker knowledge of the names of security sensitive files being uploaded
- the security sensitive files also being uploaded via partial PUT

If all of the following were true, a malicious user was able to perform remote code execution:
- writes enabled for the default servlet (disabled by default)
- support for partial PUT (enabled by default)
- application was using Tomcat's file based session persistence with the default storage location
- application included a library that may be leveraged in a deserialization attack

Users are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.
GitHub Security Advisory: GHSA-653p-vg55-5652
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Uncontrolled Resource Consumption vulnerability

Details:
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
GitHub Security Advisory: GHSA-5j33-cvvr-w245
Package: org.apache.tomcat.embed:tomcat-embed-core (MAVEN)
Severity: HIGH (CVSS 9.8)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Details:
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
GitHub Security Advisory: GHSA-5j33-cvvr-w245
Package: org.apache.tomcat:tomcat-catalina (MAVEN)
Severity: HIGH (CVSS 9.8)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 8.5.0, <= 8.5.100
Patched in: unpatched

Summary: Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Details:
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.