{"action":"Upgrade tomcat9 to 9.0.65-1 or later.","affected":[{"fixed":"9.0.65-1","introduced":"0"}],"component":"tomcat9","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["9.0.65-1"],"id":"tcs_01M5NGSDZGPEE2R36P8QSDCYH9","modified_at":"2026-10-09T09:47:20.812623920Z","published_at":"2022-06-23T11:15:07.977Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-34305","https://security-tracker.debian.org/tracker/CVE-2022-34305"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-34305#Debian:14/tomcat9","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-34305"}],"summary":"In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data witho"}