{"action":"Upgrade org.apache.tomcat:tomcat to 7.0.5 or later.","affected":[{"fixed":"7.0.5","introduced":"7.0.0"},{"introduced":"6.0.12","last_affected":"6.0.29"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2010-4172"],"ecosystem":"Maven","epss":0.42009,"exploited":false,"fixed_versions":["7.0.5"],"ghsa_id":"GHSA-c78g-qwpw-2jgv","id":"tcs_01M5N8RTCV4ESQEGBT298QYEZJ","modified_at":"2024-03-05T19:11:30Z","published_at":"2022-05-14T02:42:46Z","references":["https://osv.dev/vulnerability/GHSA-c78g-qwpw-2jgv","https://nvd.nist.gov/vuln/detail/CVE-2010-4172","https://github.com/apache/tomcat/commit/5971f9392edc6d70808b2599b062b050fcd11d23","https://bugzilla.redhat.com/show_bug.cgi?id=656246","https://github.com/apache/tomcat","https://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","https://marc.info/?l=bugtraq&m=139344343412337&w=2","https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.5","https://www.redhat.com/support/errata/RHSA-2011-0896.html","https://www.redhat.com/support/errata/RHSA-2011-0897.html","https://www.securityfocus.com/archive/1/514866/100/0/threaded","https://www.ubuntu.com/usn/USN-1048-1","https://www.vupen.com/english/advisories/2010/3047","https://www.vupen.com/english/advisories/2011/0203"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-c78g-qwpw-2jgv","url":"https://osv.dev/vulnerability/GHSA-c78g-qwpw-2jgv"}],"summary":"Improper Neutralization of Input During Web Page Generation in Apache Tomcat"}