CVE-2016-5018 Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
CriticalCVSS 9.1
EPSS 10.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat-jasper(Maven) | >= 9.0.0.M1, < 9.0.0.M10 | 9.0.0.M10 |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M1 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M3 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M4 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M6 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M8 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 9.0.0.M9 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | >= 8.5.0, < 8.5.5 | 8.5.5 |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.5.0 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.5.2 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.5.3 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.5.4 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | >= 8.0.0RC1, < 8.0.37 | 8.0.37 |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.0-RC1 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.0-RC10 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.0-RC3 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.0-RC5 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.1 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.11 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.12 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.14 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.15 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.17 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.18 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.20 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.21 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.22 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.23 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.24 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.26 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.27 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.28 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.29 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.3 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.30 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.32 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.33 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.35 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.36 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.5 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.8 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 8.0.9 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | >= 7.0.0, < 7.0.72 | 7.0.72 |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.0 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.11 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.12 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.14 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.16 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.19 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.2 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.20 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.21 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.22 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.23 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.25 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.26 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.27 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.28 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.29 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.30 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.32 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.33 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.34 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.35 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.37 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.39 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.4 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.40 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.41 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.42 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.47 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.5 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.50 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.52 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.53 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.54 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.55 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.56 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.57 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.59 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.6 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.61 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.62 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.63 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.64 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.65 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.67 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.68 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.69 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.70 | No fix listed |
| org.apache.tomcat/tomcat-jasper(Maven) | = 7.0.8 | No fix listed |
| org.apache.tomcat/jasper(Maven) | >= 6.0.0, < 6.0.47 | 6.0.47 |
| org.apache.tomcat/jasper(Maven) | = 6.0.13 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.14 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.16 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.18 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.20 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.24 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.26 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.28 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.29 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.30 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.32 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.33 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.35 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.36 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.37 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.39 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.41 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.43 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.44 | No fix listed |
| org.apache.tomcat/jasper(Maven) | = 6.0.45 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | >= 9.0.0.M1, < 9.0.0.M10 | 9.0.0.M10 |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M1 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M3 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M4 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M6 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M8 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 9.0.0.M9 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | >= 8.5.0, < 8.5.5 | 8.5.5 |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.5.0 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.5.2 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.5.3 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.5.4 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | >= 8.0.0RC1, < 8.0.37 | 8.0.37 |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.0-RC1 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.0-RC10 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.0-RC3 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.0-RC5 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.1 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.11 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.12 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.14 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.15 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.17 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.18 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.20 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.21 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.22 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.23 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.24 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.26 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.27 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.28 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.29 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.3 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.30 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.32 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.33 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.35 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.36 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.5 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.8 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 8.0.9 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | >= 7.0.0, < 7.0.72 | 7.0.72 |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.0 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.11 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.12 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.14 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.16 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.19 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.2 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.20 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.21 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.22 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.23 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.25 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.26 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.27 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.28 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.29 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.30 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.32 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.33 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.34 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.35 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.37 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.39 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.4 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.40 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.41 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.42 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.47 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.5 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.50 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.52 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.53 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.54 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.55 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.56 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.57 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.59 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.6 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.61 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.62 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.63 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.64 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.65 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.67 | No fix listed |
| org.apache.tomcat.embed/tomcat-embed-jasper(Maven) | = 7.0.68 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- [announce] 20161027 [SECURITY] CVE-2016-5018 Apache Tomcat Security Manager Bypass mailing-list
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/ mailing-list
- lists.apache.org
- security.netapp.com third-party-advisory
- USN-4557-1 third-party-advisory vendor-advisory
- web.archive.org
- web.archive.org
- web.archive.org
- www.oracle.com patch third-party-advisory
- RHSA-2017:0455 third-party-advisory vendor-advisory
- RHSA-2017:0456 third-party-advisory vendor-advisory
- RHSA-2017:1548 third-party-advisory vendor-advisory
- RHSA-2017:1549 third-party-advisory vendor-advisory
- RHSA-2017:1550 third-party-advisory vendor-advisory
- RHSA-2017:1552 third-party-advisory vendor-advisory
- RHSA-2017:2247 third-party-advisory vendor-advisory
- github.com product
- github.com
- [tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- lists.apache.org
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- RHSA-2017:0457 third-party-advisory vendor-advisory
- RHSA-2017:1551 third-party-advisory vendor-advisory
- DSA-3720 third-party-advisory vendor-advisory
- github.com
- 93942 broken-link vdb-entry
- 1038757 broken-link vdb-entry
- 1037142 broken-link vdb-entry