{"action":"Upgrade org.apache.tomcat.embed:tomcat-embed-core to 9.0.75 (9.x), 10.1.9 (10.x) or 11.0.0-M6 (11.x) or later.","affected":[{"fixed":"11.0.0-M6","introduced":"11.0.0-M5"},{"fixed":"10.1.9","introduced":"10.1.8"},{"fixed":"9.0.75","introduced":"9.0.74"}],"component":"org.apache.tomcat.embed:tomcat-embed-core","cve_ids":["CVE-2023-34981"],"ecosystem":"Maven","exploited":false,"fixed_versions":["11.0.0-M6","10.1.9","9.0.75"],"ghsa_id":"GHSA-mppv-79ch-vw6q","id":"tcs_01M5N95G3SFB2T41WKEY1KP9YY","modified_at":"2024-04-24T19:44:03Z","published_at":"2023-06-21T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-mppv-79ch-vw6q","https://nvd.nist.gov/vuln/detail/CVE-2023-34981","https://github.com/apache/tomcat/commit/2214c8030522aa9b2a367dfa5d9acff1a03666ae","https://github.com/apache/tomcat/commit/2f0ca2378415f4cf0748f4bc8fa955f41f803fa5","https://github.com/apache/tomcat/commit/739c7381aed22b7636351caf885ddc519ab6b442","https://github.com/apache/tomcat/commit/f0742f47b98aca943097f7f88e0d1163f57527e3","https://bz.apache.org/bugzilla/show_bug.cgi?id=66512","https://bz.apache.org/bugzilla/show_bug.cgi?id=66591","https://github.com/apache/tomcat","https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz","https://security.netapp.com/advisory/ntap-20230714-0003","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mppv-79ch-vw6q","url":"https://osv.dev/vulnerability/GHSA-mppv-79ch-vw6q"}],"summary":"Apache Tomcat vulnerable to information leak"}