FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
556fdf03-6785-11ed-953b-002b67dfc673Tomcat -- Request Smuggling

Apache Tomcat reports:

If Tomcat was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

The CVSS score for this vulnerability is 7.5 High


Discovery 2022-10-31
Entry 2022-11-18
tomcat
>= 8.5.0 lt 8.5.83

>= 9.0.0-M1 lt 9.0.68

>= 10.0.0-M1 lt 10.0.27

>= 10.1.0-M1 lt 10.1.1

tomcat85
>= 8.5.0 lt 8.5.83

tomcat9
>= 9.0.0-M1 lt 9.0.68

tomcat10
>= 10.0.0-M1 lt 10.0.27

tomcat101
>= 10.1.0-M1 lt 10.1.1

tomcat-devel
>= 10.1.0-M1 lt 10.1.1

CVE-2022-42252
https://nvd.nist.gov/vuln/detail/CVE-2022-42252
e2e7faf9-1b51-11ed-ae46-002b67dfc673Tomcat -- XSS in examples web application

Apache Tomcat reports:

The Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.


Discovery 2022-06-22
Entry 2022-08-14
tomcat
>= 8.5.50 lt 8.5.81

>= 9.0.30 lt 9.0.64

>= 10.0.0-M1 lt 10.0.22

>= 10.1.0-M1 lt 10.1.0-M16

tomcat85
>= 8.5.50 lt 8.5.81

tomcat9
>= 9.0.30 lt 9.0.64

tomcat10
>= 10.0.0-M1 lt 10.0.22

tomcat-devel
>= 10.1.0-M1 lt 10.1.0-M16

CVE-2022-34305
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34305