Debian/tomcat9: high 7.5
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user
Action: Upgrade tomcat9 to 9.0.70-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.70-1 | - |
Fixed versions
| 9.0.70-1 |
Sources
published · modified · JSON