Maven/org.apache.tomcat:tomcat-coyote CVE-2024-52317: medium 6.5, EPSS 2.10%

Apache Tomcat Request and/or response mix-up

Action: Upgrade org.apache.tomcat:tomcat-coyote to 9.0.96 (9.x), 10.1.31 (10.x) or 11.0.0 (11.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-qvf5-hvjx-wm27#Maven/org.apache.tomcat:tomcat-coyote
• https://nvd.nist.gov/vuln/detail/CVE-2024-52317
• https://github.com/apache/tomcat/commit/146f94f87ea398fb592c7a20a5ccbef95e9dd72b
• https://github.com/apache/tomcat/commit/47307ee27abcdea2ee40e33897aca760083de46a
• https://github.com/apache/tomcat/commit/9e840ccacb40881c03a03b1e0746bfba7369b3bd
• https://github.com/apache/tomcat
• https://lists.apache.org/thread/ty376mrxy1mmxtw3ogo53nc9l3co3dfs
• https://security.netapp.com/advisory/ntap-20250124-0004
• http://www.openwall.com/lists/oss-security/2024/11/18/3

CVE-2024-52317 · published 2024-11-18T12:30:43Z · modified 2025-01-24T22:02:57.022869Z · JSON