CVE-2024-52318
CVE-2024-52318 · Apache Tomcat: Incorrect JSP tag recycling leads to XSS
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.
CVSS 6.1 · Medium · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache tomcat
- Versions
- 11.0.0: Affected (semver)
- 10.1.31: Affected (semver)
- 9.0.96: Affected (semver)
No fix published
tomcat10 Debian:13
- Affected ranges
- ECOSYSTEM: < 10.1.33-1
Update to 10.1.33-1
tomcat10 Debian:14
- Affected ranges
- ECOSYSTEM: < 10.1.33-1
Update to 10.1.33-1