Debian/tomcat10: high 7.5
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible
Action: Upgrade tomcat10 to 10.1.52-1~deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.52-1~deb12u1 | - |
Fixed versions
| 10.1.52-1~deb12u1 |
Sources
published · modified · JSON