{"action":"Upgrade org.apache.tomcat:tomcat-catalina to 10.1.2 or later.","affected":[{"fixed":"10.1.2","introduced":"10.1.0"}],"component":"org.apache.tomcat:tomcat-catalina","cve_ids":["CVE-2022-45143"],"ecosystem":"Maven","epss":0.02669,"exploited":false,"fixed_versions":["10.1.2"],"ghsa_id":"GHSA-rq2w-37h9-vg94","id":"tcs_01M5N9C9N73T5G880C06JHX5AQ","modified_at":"2024-04-23T22:00:59.346897Z","published_at":"2023-01-03T21:30:21Z","references":["https://osv.dev/vulnerability/GHSA-rq2w-37h9-vg94","https://nvd.nist.gov/vuln/detail/CVE-2022-45143","https://github.com/apache/tomcat/commit/0cab3a56bd89f70e7481bb0d68395dc7e130dbbf","https://github.com/apache/tomcat/commit/6a0ac6a438cbbb66b6e9c5223842f53bf0cb50aa","https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e","https://github.com/apache/tomcat","https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj","https://security.gentoo.org/glsa/202305-37"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rq2w-37h9-vg94#Maven/org.apache.tomcat:tomcat-catalina","url":"https://osv.dev/vulnerability/GHSA-rq2w-37h9-vg94"}],"summary":"Apache Tomcat improperly escapes input from JsonErrorReportValve"}