-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe analysis involves examining the provided security patches and identifying the functions that contain the vulnerability or process potentially malicious input. The patches modify the internalMapWrapper method in the Mapper class, the serveResource method in the DefaultServlet class, and the authenticate method in the FormAuthenticator class. These modifications are related to handling redirects and security constraints, which are relevant to the vulnerability described in CVE-2015-5345.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.tomcat:tomcat | maven | = 9.0.0.M1 | 9.0.0.M2 |
| org.apache.tomcat:tomcat | maven | >= 8.0.0.RC1, < 8.0.30 | 8.0.30 |
| org.apache.tomcat:tomcat | maven | >= 7.0.0, < 7.0.68 | 7.0.68 |
| org.apache.tomcat:tomcat | maven | >= 6.0.0, < 6.0.45 | 6.0.45 |