CVE-2024-52318
3 advisories.
Maven/org.apache.tomcat:tomcat-jasper CVE-2024-52318: medium 6.1
Apache Tomcat - XSS in generated JSPs
Action: Upgrade org.apache.tomcat:tomcat-jasper to 9.0.97 (9.x), 10.1.32 (10.x) or 11.0.1 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0 | 11.0.1 | - |
| 10.1.31 | 10.1.32 | - |
| 9.0.96 | 9.0.97 | - |
Fixed versions
| 11.0.1 | 10.1.32 | 9.0.97 |
Sources
- osv: GHSA-f632-9449-3j4w
- https://nvd.nist.gov/vuln/detail/CVE-2024-52318
- https://github.com/apache/tomcat/commit/8d1fc4733a06d1a03b9d644c57010f2ec5f0df38
- https://github.com/apache/tomcat/commit/9813c5dd3259183f659bbb83312a5cf673cc1ebf
- https://github.com/apache/tomcat/commit/be8e32143a3159e78fe5463d09bb8e1b33bf2b1f
- https://bz.apache.org/bugzilla/show_bug.cgi?id=69333
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9
- https://security.netapp.com/advisory/ntap-20250131-0009
- http://www.openwall.com/lists/oss-security/2024/11/18/4
CVE-2024-52318 · published · modified · JSON
Maven/org.apache.tomcat.embed:tomcat-embed-jasper CVE-2024-52318: medium 6.1
Apache Tomcat - XSS in generated JSPs
Action: Upgrade org.apache.tomcat.embed:tomcat-embed-jasper to 9.0.97 (9.x), 10.1.32 (10.x) or 11.0.1 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.96 | 9.0.97 | - |
| 11.0.0 | 11.0.1 | - |
| 10.1.31 | 10.1.32 | - |
Fixed versions
| 9.0.97 | 11.0.1 | 10.1.32 |
Sources
- osv: GHSA-f632-9449-3j4w#Maven/org.apache.tomcat.embed:tomcat-embed-jasper
- https://nvd.nist.gov/vuln/detail/CVE-2024-52318
- https://github.com/apache/tomcat/commit/8d1fc4733a06d1a03b9d644c57010f2ec5f0df38
- https://github.com/apache/tomcat/commit/9813c5dd3259183f659bbb83312a5cf673cc1ebf
- https://github.com/apache/tomcat/commit/be8e32143a3159e78fe5463d09bb8e1b33bf2b1f
- https://bz.apache.org/bugzilla/show_bug.cgi?id=69333
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9
- https://security.netapp.com/advisory/ntap-20250131-0009
- http://www.openwall.com/lists/oss-security/2024/11/18/4
CVE-2024-52318 · published · modified · JSON
Maven/org.apache.tomcat:tomcat CVE-2024-52318: medium 6.1
Apache Tomcat - XSS in generated JSPs
Action: Upgrade org.apache.tomcat:tomcat to 9.0.97 (9.x), 10.1.32 (10.x) or 11.0.1 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0 | 11.0.1 | - |
| 10.1.31 | 10.1.32 | - |
| 9.0.96 | 9.0.97 | - |
Fixed versions
| 11.0.1 | 10.1.32 | 9.0.97 |
Sources
- osv: GHSA-f632-9449-3j4w#Maven/org.apache.tomcat:tomcat
- https://nvd.nist.gov/vuln/detail/CVE-2024-52318
- https://github.com/apache/tomcat/commit/8d1fc4733a06d1a03b9d644c57010f2ec5f0df38
- https://github.com/apache/tomcat/commit/9813c5dd3259183f659bbb83312a5cf673cc1ebf
- https://github.com/apache/tomcat/commit/be8e32143a3159e78fe5463d09bb8e1b33bf2b1f
- https://bz.apache.org/bugzilla/show_bug.cgi?id=69333
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9
- https://security.netapp.com/advisory/ntap-20250131-0009
- http://www.openwall.com/lists/oss-security/2024/11/18/4
CVE-2024-52318 · published · modified · JSON