Skip to content

[Snyk] Security upgrade org.apache.tomcat:catalina from 6.0.43 to 6.0.53#32

Open
snyk-bot wants to merge 4 commits into
masterfrom
snyk-fix-4375d090a759e3c162acbaf5c79a6b9f
Open

[Snyk] Security upgrade org.apache.tomcat:catalina from 6.0.43 to 6.0.53#32
snyk-bot wants to merge 4 commits into
masterfrom
snyk-fix-4375d090a759e3c162acbaf5c79a6b9f

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • plugins/bom/pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCAT-30849
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
medium severity 365/1000
Why? Has a fix available, CVSS 4.3
Directory Traversal
SNYK-JAVA-ORGAPACHETOMCAT-30850
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
medium severity 415/1000
Why? Has a fix available, CVSS 5.3
Directory Traversal
SNYK-JAVA-ORGAPACHETOMCAT-30851
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
medium severity 365/1000
Why? Has a fix available, CVSS 4.3
Information Exposure
SNYK-JAVA-ORGAPACHETOMCAT-30852
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
high severity 590/1000
Why? Has a fix available, CVSS 8.8
Arbitrary Code Execution
SNYK-JAVA-ORGAPACHETOMCAT-30853
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
medium severity 445/1000
Why? Has a fix available, CVSS 5.9
Timing Attack
SNYK-JAVA-ORGAPACHETOMCAT-30854
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Access Restriction Bypass
SNYK-JAVA-ORGAPACHETOMCAT-30855
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
high severity 580/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1
Information Exposure
SNYK-JAVA-ORGAPACHETOMCAT-30871
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No Proof of Concept No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Information Exposure
SNYK-JAVA-ORGAPACHETOMCAT-30872
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
high severity 525/1000
Why? Has a fix available, CVSS 7.5
Information Exposure
SNYK-JAVA-ORGAPACHETOMCAT-31431
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found
low severity 295/1000
Why? Has a fix available, CVSS 2.9
Directory Traversal
SNYK-JAVA-ORGAPACHETOMCAT-460328
org.apache.tomcat:catalina:
6.0.43 -> 6.0.53
No No Known Exploit No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants