{"action":"Upgrade org.apache.tomcat:tomcat to 5.5.35 (5.x), 6.0.35 (6.x) or 7.0.23 (7.x) or later.","affected":[{"fixed":"5.5.35","introduced":"5.5.0"},{"fixed":"6.0.35","introduced":"6.0.0"},{"fixed":"7.0.23","introduced":"7.0.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2011-4858"],"ecosystem":"Maven","epss":0.79713,"exploited":false,"fixed_versions":["5.5.35","6.0.35","7.0.23"],"ghsa_id":"GHSA-wr3m-gw98-mc3j","id":"tcs_01M5N9H1KM3EE2GA221N3DMET6","modified_at":"2023-11-08T03:57:01.874964Z","published_at":"2022-05-14T03:52:45Z","references":["https://osv.dev/vulnerability/GHSA-wr3m-gw98-mc3j","https://nvd.nist.gov/vuln/detail/CVE-2011-4858","https://bugzilla.redhat.com/show_bug.cgi?id=750521","https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py","https://github.com/apache/tomcat","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886","http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e","http://marc.info/?l=bugtraq&m=132871655717248&w=2","http://marc.info/?l=bugtraq&m=133294394108746&w=2","http://marc.info/?l=bugtraq&m=136485229118404&w=2","http://rhn.redhat.com/errata/RHSA-2012-0074.html","http://rhn.redhat.com/errata/RHSA-2012-0075.html","http://rhn.redhat.com/errata/RHSA-2012-0076.html","http://tomcat.apache.org/tomcat-7.0-doc/changelog.html","http://www.debian.org/security/2012/dsa-2401","http://www.kb.cert.org/vuls/id/903934","http://www.nruns.com/_downloads/advisory28122011.pdf","http://www.ocert.org/advisories/ocert-2011-003.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wr3m-gw98-mc3j","url":"https://osv.dev/vulnerability/GHSA-wr3m-gw98-mc3j"}],"summary":"Improper Input Validation in Apache Tomcat"}