Maven/org.apache.tomcat:tomcat-coyote CVE-2022-42252: high 7.5, EPSS 1.78%

Apache Tomcat may reject request containing invalid Content-Length header

Action: Upgrade org.apache.tomcat:tomcat-coyote to 9.0.68 (9.0.x), 10.0.27 (10.0.x) or 10.1.1 (10.1.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-p22x-g9px-3945#Maven/org.apache.tomcat:tomcat-coyote
• https://nvd.nist.gov/vuln/detail/CVE-2022-42252
• https://github.com/apache/tomcat/commit/0d089a15047faf9cb3c82f80f4d28febd4798920
• https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77
• https://github.com/apache/tomcat/commit/a1c07906d8dcaf7957e5cc97f5cdbac7d18a205a
• https://github.com/apache/tomcat/commit/c9fe754e5d17e262dfbd3eab2a03ca96ff372dc3
• https://github.com/apache/tomcat
• https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq
• https://security.gentoo.org/glsa/202305-37
• https://tomcat.apache.org/security-10.html
• https://tomcat.apache.org/security-8.html
• https://tomcat.apache.org/security-9.html

CVE-2022-42252 · published 2022-11-01T12:00:30Z · modified 2024-04-23T20:46:15.447071Z · JSON