{"action":"Upgrade org.apache.tomcat:tomcat to 3.3.1a or later.","affected":[{"fixed":"3.3.1a","introduced":"0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2003-0042"],"ecosystem":"Maven","epss":0.46035,"exploited":false,"fixed_versions":["3.3.1a"],"ghsa_id":"GHSA-qfw2-wvrw-mvw4","id":"tcs_01M5N99EF07D0ZDRYCB2G69YN5","modified_at":"2023-11-08T03:56:45.038476Z","published_at":"2022-04-29T01:25:43Z","references":["https://osv.dev/vulnerability/GHSA-qfw2-wvrw-mvw4","https://nvd.nist.gov/vuln/detail/CVE-2003-0042","https://exchange.xforce.ibmcloud.com/vulnerabilities/11194","https://github.com/apache/tomcat","http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a","http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt","http://marc.info/?l=bugtraq&m=104394568616290&w=2","http://secunia.com/advisories/7972","http://secunia.com/advisories/7977","http://www.ciac.org/ciac/bulletins/n-060.shtml","http://www.debian.org/security/2003/dsa-246","http://www.securityfocus.com/advisories/5111","http://www.securityfocus.com/bid/6721"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qfw2-wvrw-mvw4","url":"https://osv.dev/vulnerability/GHSA-qfw2-wvrw-mvw4"}],"summary":"Jakarta Tomcat Directory Listing vulnerability"}