FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-04-05 14:02:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
556fdf03-6785-11ed-953b-002b67dfc673Tomcat -- Request Smuggling

Apache Tomcat reports:

If Tomcat was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

The CVSS score for this vulnerability is 7.5 High


Discovery 2022-10-31
Entry 2022-11-18
tomcat
>= 8.5.0 lt 8.5.83

>= 9.0.0-M1 lt 9.0.68

>= 10.0.0-M1 lt 10.0.27

>= 10.1.0-M1 lt 10.1.1

tomcat85
>= 8.5.0 lt 8.5.83

tomcat9
>= 9.0.0-M1 lt 9.0.68

tomcat10
>= 10.0.0-M1 lt 10.0.27

tomcat101
>= 10.1.0-M1 lt 10.1.1

tomcat-devel
>= 10.1.0-M1 lt 10.1.1

CVE-2022-42252
https://nvd.nist.gov/vuln/detail/CVE-2022-42252