tocsin

Debian/tomcat11: low 3.7

Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET

Action: Upgrade tomcat11 to 11.0.15-1~deb13u1 or later.

Affected

introducedfixedlast affected
011.0.15-1~deb13u1-

Fixed versions

11.0.15-1~deb13u1

Sources

published · modified · JSON