{"action":"Upgrade org.apache.tomcat:tomcat-util to 8.5.84 (8.x) or 9.0.69 (9.x) or later.","affected":[{"fixed":"8.5.84","introduced":"8.5.83"},{"fixed":"9.0.69","introduced":"9.0.40"}],"component":"org.apache.tomcat:tomcat-util","cve_ids":["CVE-2022-45143"],"ecosystem":"Maven","epss":0.02573,"exploited":false,"fixed_versions":["8.5.84","9.0.69"],"ghsa_id":"GHSA-rq2w-37h9-vg94","id":"tcs_01M5N9C9SWBY2HVK5ZZH8E77XZ","modified_at":"2024-04-23T22:00:59.346897Z","published_at":"2023-01-03T21:30:21Z","references":["https://osv.dev/vulnerability/GHSA-rq2w-37h9-vg94","https://nvd.nist.gov/vuln/detail/CVE-2022-45143","https://github.com/apache/tomcat/commit/0cab3a56bd89f70e7481bb0d68395dc7e130dbbf","https://github.com/apache/tomcat/commit/6a0ac6a438cbbb66b6e9c5223842f53bf0cb50aa","https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e","https://github.com/apache/tomcat","https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj","https://security.gentoo.org/glsa/202305-37"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rq2w-37h9-vg94#Maven/org.apache.tomcat:tomcat-util","url":"https://osv.dev/vulnerability/GHSA-rq2w-37h9-vg94"}],"summary":"Apache Tomcat improperly escapes input from JsonErrorReportValve"}