Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.
History

Fri, 22 Nov 2024 14:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-79
References
Metrics threat_severity

None

threat_severity

Moderate


Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Mon, 18 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-326
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 18 Nov 2024 12:45:00 +0000

Type Values Removed Values Added
Description Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.
Title Apache Tomcat: Incorrect JSP tag recycling leads to XSS
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2024-11-18T12:21:39.170Z

Updated: 2024-11-18T18:03:26.033Z

Reserved: 2024-11-07T07:48:18.086Z

Link: CVE-2024-52318

cve-icon Vulnrichment

Updated: 2024-11-18T18:03:26.033Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-18T13:15:04.490

Modified: 2024-11-21T09:46:16.813

Link: CVE-2024-52318

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-11-18T12:21:39Z

Links: CVE-2024-52318 - Bugzilla