advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard
verified publisher icon github

[GHSA-3p86-xgrq-m6p6] Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Open sunSUNQ opened this issue 1 year ago • 2 comments

Updates

  • Affected products
  • References

Comments Add four more patch links related to CVE-2011-0013.

sunSUNQ avatar Feb 29 '24 02:02 sunSUNQ

Hey @sunSUNQ, can I ask that you share those links in the thread as well?

darakian avatar Mar 05 '24 22:03 darakian

Sure, I have submitted four patch links that are related to the current vulnerability. https://github.com/apache/tomcat/commit/493ba610a8973efec6e5ca5c02d8cc9c323d4d5f https://github.com/apache/tomcat/commit/c8a9a43183e061f09eb5cf7cd5443cecd8699462 https://github.com/apache/tomcat/commit/1930114c4122f2b6f45d6b92e7790288b17e2ad2 https://github.com/apache/tomcat/commit/fce861ba7f6ed5e11f839759f1c855370c43b8d3

sunSUNQ avatar Mar 06 '24 03:03 sunSUNQ

Hello, I'm looking forward to your response.

sunSUNQ avatar Mar 21 '24 01:03 sunSUNQ

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

taladrane avatar Apr 06 '24 00:04 taladrane