{"action":"Upgrade org.apache.tomcat:tomcat-coyote to 8.5.89 or later.","affected":[{"fixed":"8.5.89","introduced":"8.5.88"}],"component":"org.apache.tomcat:tomcat-coyote","cve_ids":["CVE-2023-34981"],"ecosystem":"Maven","epss":0.01116,"exploited":false,"fixed_versions":["8.5.89"],"ghsa_id":"GHSA-mppv-79ch-vw6q","id":"tcs_01M5N95G7TDA7RHB3SY9X3ADM3","modified_at":"2024-04-24T19:44:03Z","published_at":"2023-06-21T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-mppv-79ch-vw6q","https://nvd.nist.gov/vuln/detail/CVE-2023-34981","https://github.com/apache/tomcat/commit/2214c8030522aa9b2a367dfa5d9acff1a03666ae","https://github.com/apache/tomcat/commit/2f0ca2378415f4cf0748f4bc8fa955f41f803fa5","https://github.com/apache/tomcat/commit/739c7381aed22b7636351caf885ddc519ab6b442","https://github.com/apache/tomcat/commit/f0742f47b98aca943097f7f88e0d1163f57527e3","https://bz.apache.org/bugzilla/show_bug.cgi?id=66512","https://bz.apache.org/bugzilla/show_bug.cgi?id=66591","https://github.com/apache/tomcat","https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz","https://security.netapp.com/advisory/ntap-20230714-0003","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mppv-79ch-vw6q#Maven/org.apache.tomcat:tomcat-coyote","url":"https://osv.dev/vulnerability/GHSA-mppv-79ch-vw6q"}],"summary":"Apache Tomcat vulnerable to information leak"}