{"action":"Upgrade org.apache.tomcat:tomcat to 6.0.35 (6.x) or 7.0.22 (7.x) or later.","affected":[{"fixed":"6.0.35","introduced":"6.0.30"},{"fixed":"7.0.22","introduced":"7.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2011-3375"],"ecosystem":"Maven","epss":0.0633,"exploited":false,"fixed_versions":["6.0.35","7.0.22"],"ghsa_id":"GHSA-rp8h-vr48-4j8p","id":"tcs_01M5N9C6PMZ3G057Q13E0ZD4FC","modified_at":"2024-01-19T19:43:22.443020Z","published_at":"2022-05-17T05:33:28Z","references":["https://osv.dev/vulnerability/GHSA-rp8h-vr48-4j8p","https://nvd.nist.gov/vuln/detail/CVE-2011-3375","https://github.com/apache/tomcat/commit/9eae334e9492f55a841e6eb7ab302ff11d03ab21","https://github.com/apache/tomcat","http://tomcat.apache.org/security-6.html","http://tomcat.apache.org/security-7.html","http://www.debian.org/security/2012/dsa-2401"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rp8h-vr48-4j8p","url":"https://osv.dev/vulnerability/GHSA-rp8h-vr48-4j8p"}],"summary":"Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests"}