CVE-2010-4172
1 advisory.
Maven/org.apache.tomcat:tomcat CVE-2010-4172: medium
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Action: Upgrade org.apache.tomcat:tomcat to 7.0.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.5 | - |
| 6.0.12 | - | 6.0.29 |
Fixed versions
| 7.0.5 |
Sources
- osv: GHSA-c78g-qwpw-2jgv
- https://nvd.nist.gov/vuln/detail/CVE-2010-4172
- https://github.com/apache/tomcat/commit/5971f9392edc6d70808b2599b062b050fcd11d23
- https://bugzilla.redhat.com/show_bug.cgi?id=656246
- https://github.com/apache/tomcat
- https://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
- https://marc.info/?l=bugtraq&m=139344343412337&w=2
- https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.5
- https://www.redhat.com/support/errata/RHSA-2011-0896.html
- https://www.redhat.com/support/errata/RHSA-2011-0897.html
- https://www.securityfocus.com/archive/1/514866/100/0/threaded
- https://www.ubuntu.com/usn/USN-1048-1
- https://www.vupen.com/english/advisories/2010/3047
- https://www.vupen.com/english/advisories/2011/0203
CVE-2010-4172 · published · modified · JSON