Vulnerability-Lookup

RHSA-2023:6570

Vulnerability from csaf_opensuse - Published: 2023-11-07 00:00 - Updated: 2026-10-11 11:28

Summary

security update for tomcat

Severity

Low

Notes

Title of the patch: security update for tomcat

Description of the patch: This security update provides a functional equivalent of RHSA-2023:6570. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2023:6570.

Patchnames: RHSA-2023:6570

CVE-2023-24998

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch	—	Vendor Fix

Threats

Impact important

CVE-2023-28708

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2023-24998

Threats

Impact important

CVE-2023-28709

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2023-24998

Threats

Impact important

References

15 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2023-24998/	self
https://www.suse.com/security/cve/CVE-2023-28708/	self
https://www.suse.com/security/cve/CVE-2023-28709/	self
https://www.suse.com/security/cve/CVE-2023-24998	external
https://bugzilla.suse.com/1208513	external
https://bugzilla.suse.com/1210310	external
https://bugzilla.suse.com/1211608	external
https://bugzilla.suse.com/1228313	external
https://www.suse.com/security/cve/CVE-2023-28708	external
https://bugzilla.suse.com/1209622	external
https://www.suse.com/security/cve/CVE-2023-28709	external
https://bugzilla.suse.com/1211608	external
https://bugzilla.suse.com/1228313	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for tomcat",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2023:6570.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:6570.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2023:6570",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_6570.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-24998 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-24998/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-28708 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-28708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-28709 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-28709/"
      }
    ],
    "title": "security update for tomcat",
    "tracking": {
      "current_release_date": "2026-10-11T11:28:26Z",
      "generator": {
        "date": "2023-11-07T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2023:6570",
      "initial_release_date": "2023-11-07T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-11-07T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:32:48Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-11T11:28:26Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.62:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat@9.0.62-37.el9_3?arch=noarch\u0026epoch=1\u0026upstream=tomcat-1:9.0.62-37.el9_3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.62:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-admin-webapps@9.0.62-37.el9_3?arch=noarch\u0026epoch=1\u0026upstream=tomcat-1:9.0.62-37.el9_3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.62:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-docs-webapp@9.0.62-37.el9_3?arch=noarch\u0026epoch=1\u0026upstream=tomcat-1:9.0.62-37.el9_3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tomcat-el-3.0-api@9.0.62-37.el9_3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tomcat-jsp-2.3-api@9.0.62-37.el9_3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-lib-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-lib-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.62:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-lib@9.0.62-37.el9_3?arch=noarch\u0026epoch=1\u0026upstream=tomcat-1:9.0.62-37.el9_3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tomcat-servlet-4.0-api@9.0.62-37.el9_3?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-1:9.0.62-37.el9_3.noarch",
                "product": {
                  "name": "tomcat-webapps-1:9.0.62-37.el9_3.noarch",
                  "product_id": "tomcat-webapps-1:9.0.62-37.el9_3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.62:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-webapps@9.0.62-37.el9_3?arch=noarch\u0026epoch=1\u0026upstream=tomcat-1:9.0.62-37.el9_3.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9",
                "product": {
                  "name": "SUSE Liberty Linux 9",
                  "product_id": "SUSE Liberty Linux 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9.6 EMS",
                "product": {
                  "name": "SUSE Liberty Linux 9.6 EMS",
                  "product_id": "SUSE Liberty Linux 9.6 EMS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-lib-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-1:9.0.62-37.el9_3.noarch as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
        },
        "product_reference": "tomcat-webapps-1:9.0.62-37.el9_3.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-24998",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-24998"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-24998",
          "url": "https://www.suse.com/security/cve/CVE-2023-24998"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1208513 for CVE-2023-24998",
          "url": "https://bugzilla.suse.com/1208513"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1210310 for CVE-2023-24998",
          "url": "https://bugzilla.suse.com/1210310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1211608 for CVE-2023-24998",
          "url": "https://bugzilla.suse.com/1211608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228313 for CVE-2023-24998",
          "url": "https://bugzilla.suse.com/1228313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-24998"
    },
    {
      "cve": "CVE-2023-28708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-28708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not  include the secure attribute. This could result in the user agent  transmitting the session cookie over an insecure channel.\n\nOlder, EOL versions may also be affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-28708",
          "url": "https://www.suse.com/security/cve/CVE-2023-28708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209622 for CVE-2023-28708",
          "url": "https://bugzilla.suse.com/1209622"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-28708"
    },
    {
      "cve": "CVE-2023-28709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-28709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP       connector settings were used such that the maxParameterCount  could be reached using query string parameters and a request was       submitted that supplied exactly maxParameterCount parameters  in the query string, the limit for uploaded request parts could be  bypassed with the potential for a denial of service to occur.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
          "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-28709",
          "url": "https://www.suse.com/security/cve/CVE-2023-28709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1211608 for CVE-2023-28709",
          "url": "https://bugzilla.suse.com/1211608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228313 for CVE-2023-28709",
          "url": "https://bugzilla.suse.com/1228313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9.6 EMS:tomcat-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-admin-webapps-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-docs-webapp-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-el-3.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-lib-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3.noarch",
            "SUSE Liberty Linux 9:tomcat-webapps-1:9.0.62-37.el9_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-28709"
    }
  ]
}

CVE-2023-24998 (GCVE-0-2023-24998)

Vulnerability from cvelistv5 – Published: 2023-02-20 15:57 – Updated: 2026-10-07 16:20

Title

Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

Summary

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-03 19:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

apache CNA under the mitre root

CNA scorecard B 76/100 over 946 records in the last 180 days details

References

8 references

URL	Tags
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/05/22/1
https://security.gentoo.org/glsa/202305-37
https://www.debian.org/security/2023/dsa-5522
https://lists.debian.org/debian-lts-announce/2023…
https://security.netapp.com/advisory/ntap-2023030…
https://lists.debian.org/debian-lts-announce/2025…
https://security.netapp.com/advisory/ntap-2024110…

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Commons FileUpload	Affected: 0 , < 1.5 (semver)
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 Affected: 10.0.0-M1 , ≤ 10.1.4 (semver) Affected: 9.0.0-M1 , ≤ 9.0.70 (semver) Affected: 8.5.0 , ≤ 8.5.84 (semver)

Credits

Jakob Ackermann

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:24.224Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20230302-0013/"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5522"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-24998",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-03T19:22:53.244328Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-07T16:20:25.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Commons FileUpload",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "1.5",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.0-M1"
            },
            {
              "lessThanOrEqual": "10.1.4",
              "status": "affected",
              "version": "10.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.70",
              "status": "affected",
              "version": "9.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.84",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jakob Ackermann"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eApache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured.\u003cbr\u003e\u003c/div\u003e"
            }
          ],
          "value": "Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-13T15:06:16.472Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-37"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5522"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2023-24998",
    "datePublished": "2023-02-20T15:57:07.372Z",
    "dateReserved": "2023-02-01T10:32:05.492Z",
    "dateUpdated": "2026-10-07T16:20:25.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-28708 (GCVE-0-2023-28708)

Vulnerability from cvelistv5 – Published: 2023-03-22 10:10 – Updated: 2025-11-04 19:15

Title

Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations

Summary

When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-13 14:33 UTC

CWE

CWE-523 - Unprotected Transport of Credentials

Assigner

apache CNA under the mitre root

CNA scorecard B 76/100 over 946 records in the last 180 days details

References

2 references

URL	Tags
https://lists.apache.org/thread/hdksc59z3s7tm39x0…	vendor-advisory
https://security.netapp.com/advisory/ntap-2023033…

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.0-M2 (semver) Affected: 10.1.0-M1 , ≤ 10.1.5 (semver) Affected: 9.0.0-M1 , ≤ 9.0.71 (semver) Affected: 8.5.0 , ≤ 8.5.85 (semver) Unknown: 3 , < 8.5.0 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:15:54.760Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20230331-0012/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-28708",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-13T14:33:37.066034Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-13T14:36:47.576Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.0-M2",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.5",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.71",
              "status": "affected",
              "version": "9.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.85",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.5.0",
              "status": "unknown",
              "version": "3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\n\u003cdiv\u003e\n\u003cp\u003eWhen using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not\u0026nbsp;include the secure attribute. This could result in the user agent\u0026nbsp;\u003cspan style=\"background-color: var(--wht);\"\u003etransmitting the session cookie over an insecure channel.\u003cbr\u003e\u003cbr\u003eOlder, EOL versions may also be affected.\u003c/span\u003e\u003c/p\u003e\u003c/div\u003e\n\u003c/div\u003e"
            }
          ],
          "value": "When using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not\u00a0include the secure attribute. This could result in the user agent\u00a0transmitting the session cookie over an insecure channel.\n\nOlder, EOL versions may also be affected."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-523",
              "description": "CWE-523 Unprotected Transport of Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T12:07:09.307Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67"
        }
      ],
      "source": {
        "defect": [
          "66474"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2023-28708",
    "datePublished": "2023-03-22T10:10:58.956Z",
    "dateReserved": "2023-03-21T17:26:28.837Z",
    "dateUpdated": "2025-11-04T19:15:54.760Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-28709 (GCVE-0-2023-28709)

Vulnerability from cvelistv5 – Published: 2023-05-22 10:08 – Updated: 2025-02-13 16:48

Title

Apache Tomcat: Fix for CVE-2023-24998 is incomplete

Summary

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted that supplied exactly maxParameterCount parameters in the query string, the limit for uploaded request parts could be bypassed with the potential for a denial of service to occur.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-20 15:15 UTC

CWE

CWE-193 - Off-by-one Error

Assigner

apache CNA under the mitre root

CNA scorecard B 76/100 over 946 records in the last 180 days details

References

5 references

URL	Tags
https://lists.apache.org/thread/7wvxonzwb7k9hx9jt…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/05/22/1
https://security.gentoo.org/glsa/202305-37
https://security.netapp.com/advisory/ntap-2023061…
https://www.debian.org/security/2023/dsa-5521

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M2 , ≤ 11.0.0-M4 (semver) Affected: 10.1.5 , ≤ 10.1.7 (semver) Affected: 9.0.71 , ≤ 9.0.73 (semver) Affected: 8.5.85 , ≤ 8.5.87 (semver)

Credits

Chenwei Jiang, Chenfeng Nie and Yue Yang from the Huawei Nebula Security Lab

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T13:43:23.741Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230616-0004/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5521"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-28709",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-20T15:15:57.637239Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T18:13:44.180Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.0-M4",
              "status": "affected",
              "version": "11.0.0-M2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.7",
              "status": "affected",
              "version": "10.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.73",
              "status": "affected",
              "version": "9.0.71",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.87",
              "status": "affected",
              "version": "8.5.85",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Chenwei Jiang, Chenfeng Nie and Yue Yang from the Huawei Nebula Security Lab"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003eThe fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP       connector settings were used such that the maxParameterCount\u0026nbsp;could be reached using query string parameters and a request was       submitted that supplied exactly maxParameterCount parameters\u0026nbsp;\u003cspan style=\"background-color: var(--wht);\"\u003ein the query string, the limit for uploaded request parts could be\u0026nbsp;\u003c/span\u003e\u003cspan style=\"background-color: var(--wht);\"\u003ebypassed with the potential for a denial of service to occur.\u003c/span\u003e\u003c/p\u003e\u003c/div\u003e\u003cbr\u003e"
            }
          ],
          "value": "The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP       connector settings were used such that the maxParameterCount\u00a0could be reached using query string parameters and a request was       submitted that supplied exactly maxParameterCount parameters\u00a0in the query string, the limit for uploaded request parts could be\u00a0bypassed with the potential for a denial of service to occur."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-193",
              "description": "CWE-193 Off-by-one Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-11T06:06:25.936Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/05/22/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202305-37"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230616-0004/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5521"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: Fix for CVE-2023-24998 is incomplete",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2023-28709",
    "datePublished": "2023-05-22T10:08:49.541Z",
    "dateReserved": "2023-03-21T17:28:47.353Z",
    "dateUpdated": "2025-02-13T16:48:49.704Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2023:6570

CVE-2023-24998 (GCVE-0-2023-24998)

CVE-2023-28708 (GCVE-0-2023-28708)

CVE-2023-28709 (GCVE-0-2023-28709)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour