CVE-2024-52318

Apache Tomcat: Incorrect JSP tag recycling leads to XSS

Medium · published November 18, 2024

CVSS v3.1
6.1
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

Incorrect object recycling and reuse vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96.

Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01736 · 77.5th percentile
Published
2024-11-18T12:21Z
EPSS history
Timeline
  • 18 NOV 12:21Z
    Apache Tomcat: Incorrect JSP tag recycling leads to XSS
    cvelistv5