Re: [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up

2024-11-18 Thread Mark Thomas
hanks and Regards, Rajendra Rathore 9922701491 -Original Message- From: Mark Thomas Sent: Monday, November 18, 2024 4:48 PM To: Tomcat Users List Cc: annou...@apache.org; annou...@tomcat.apache.org; Tomcat Developers List Subject: [SECURITY] CVE-2024-52317 Apache Tomcat - Request a

RE: [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up

2024-11-18 Thread Rathore, Rajendra
; annou...@tomcat.apache.org; Tomcat Developers List Subject: [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up CVE-2024-52317 Apache Tomcat - Request and/or response mix-up Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0

[SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up

2024-11-18 Thread Mark Thomas
Note: Correction to 10.1.x affected versions CVE-2024-52317 Apache Tomcat - Request and/or response mix-up Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M23 to 11.0.0-M26 Apache Tomcat 10.1.27 to 10.1.30 Apache Tomcat 9.0.92 to 9.0.95 Descr

[SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up

2024-11-18 Thread Mark Thomas
CVE-2024-52317 Apache Tomcat - Request and/or response mix-up Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M23 to 11.0.0-M26 Apache Tomcat 10.1.7 to 10.1.30 Apache Tomcat 9.0.92 to 9.0.95 Description: Incorrect recycling of the request and