Threats tagged 'ghsa-27hp-xhwr-wr2m'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2024-56337Org.apache.tomcat:tomcat catalina: Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Critical9.82024-12-20GCVE DatabaseCVE-2024-56337 A Time-of-check Time-of-use (TOCTOU) race condition vulnerability (CVE-2024-56337) affects Apache Tomcat versions 9.0.0.M1 through 9.0.97, 10.1.0-M1 through 10.1.33, and 11.0.0-M1 through 11.0.1. The vulnerability relates to the default servlet write capability on case insensitive file systems and requires specific Java system property configurations to fully mitigate. Tomcat versions 9.0.98, 10.1.34, and 11.0.2 include fixes that enforce appropriate settings and disable problematic caching by default. Report on CVE-2024-56337 Vulnerability CWE-367 #ghsa-27hp-xhwr-wr2m #maven	GCVE Database	2024-12-20

Page 1 of 1