MGASA-2024-0379

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2024-0379.html

Import Source

https://advisories.mageia.org/MGASA-2024-0379.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2024-0379

Related

Published

2024-11-27T19:59:10Z

Modified

2024-11-27T19:29:50Z

Summary

Updated tomcat packages fix security vulnerabilities

Details

Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.97-1.mga9

{
    "section": "core"
}