Maven/org.apache.tomcat:tomcat CVE-2011-2481: medium, EPSS 0.84%
Apache Tomcat Allows Replacing of XML Parser
Action: Upgrade org.apache.tomcat:tomcat to 7.0.17 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.17 | - |
Fixed versions
| 7.0.17 |
Sources
- osv: GHSA-r7c8-hghc-2mp8
- https://nvd.nist.gov/vuln/detail/CVE-2011-2481
- https://github.com/apache/tomcat/commit/279e4451cb996f810fbca2f78b6340412d9daa7b
- https://github.com/apache/tomcat
- https://issues.apache.org/bugzilla/show_bug.cgi?id=51395
- https://web.archive.org/web/20111209022500/http://www.securityfocus.com/bid/49147
- https://web.archive.org/web/20161127215021/http://securitytracker.com/id?1025924
- http://marc.info/?l=bugtraq&m=139344343412337&w=2
- http://svn.apache.org/viewvc?view=revision&revision=1137753
- http://svn.apache.org/viewvc?view=revision&revision=1138788
- http://tomcat.apache.org/security-7.html
CVE-2011-2481 · published · modified · JSON