{"action":"Upgrade org.apache.tomcat:tomcat to 3.3.1a or later.","affected":[{"fixed":"3.3.1a","introduced":"0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2003-0043"],"ecosystem":"Maven","epss":0.04514,"exploited":false,"fixed_versions":["3.3.1a"],"ghsa_id":"GHSA-cvx5-7vc7-rg77","id":"tcs_01M5N8TDEHSFW83YCHJM06187X","modified_at":"2025-04-03T15:42:10.869033Z","published_at":"2022-04-29T01:25:44Z","references":["https://osv.dev/vulnerability/GHSA-cvx5-7vc7-rg77","https://nvd.nist.gov/vuln/detail/CVE-2003-0043","https://exchange.xforce.ibmcloud.com/vulnerabilities/11195","https://github.com/apache/tomcat","https://web.archive.org/web/20030804165204/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt","https://web.archive.org/web/20030810045410/http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a","https://web.archive.org/web/20030819144200/http://www.ciac.org/ciac/bulletins/n-060.shtml","https://web.archive.org/web/20131213024606/http://www.securityfocus.com/bid/6722","https://web.archive.org/web/20140627151430/http://www.securityfocus.com/advisories/5111","http://www.debian.org/security/2003/dsa-246"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cvx5-7vc7-rg77","url":"https://osv.dev/vulnerability/GHSA-cvx5-7vc7-rg77"}],"summary":"Tomcat uses trusted privileges when processing web.xml file"}