CVE-2024-21733
Assigner: apache
Published: 2024-01-19T10:29:04.694Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Tomcat
vendor: Apache Software Foundation
versions: lessThanOrEqual: 8.5.63
status: affected
version: 8.5.7
versionType: semver
lessThanOrEqual: 9.0.43
status: affected
version: 9.0.0-M11
versionType: semver
credits: type: finder
value: xer0dayz from company Sn1perSecurity LLC
descriptions: supportingMedia: base64: no
type: text/html
value: Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.<p>This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43.</p><p>Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.</p>
value: Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43.

Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.


metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-209
description: CWE-209 Generation of Error Message Containing Sensitive Information
type: CWE
source: discovery: UNKNOWN
title: Apache Tomcat: Leaking of unrelated request bodies in default error page
x_generator: engine: Vulnogram 0.1.0-dev