CVE-2018-11784
published 2018-10-04CVE-2018-11784: When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g…
PriorityP350medium4.3CVSS 3.0
AVNACLPRNUIRSUCNILAN
EXPLOIT
EPSS
97.68%
99.9th percentile
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Affected
58 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
Detection & IOCsextracted from sources · hover to see the quote
url{{BaseURL}}//interact.sh
- →Trigger the vulnerability by requesting a path with at least 2 leading slashes before a valid subfolder and no trailing slash; the server will redirect to an attacker-controlled URI ↗
- →The vulnerability is triggered via the default servlet when a directory redirect is issued; monitor for redirect responses (3xx) to URIs not matching the application's own domain ↗
- →Confirm the redirect result: browsing to the crafted double-slash URL causes the application to redirect to the attacker-supplied host (e.g. http://test/) ↗
- ·Affected versions are Apache Tomcat 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33, and 7.0.23 to 7.0.90; fixed in 9.0.12, 8.5.34, and 7.0.91 respectively
- ·The vulnerability only manifests when the default servlet performs a directory redirect; a valid subfolder must exist in the application for the crafted URL to trigger the redirect ↗
- ·The Nuclei template checks that the response is NOT a 404, meaning the path segment used in the probe must resolve to an existing resource on the target
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
ghsa4.3MEDIUM
osv4.3MEDIUM
vendor_apache4.3MEDIUM
vendor_debian4.3LOW
vendor_redhat4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Retail Order Broker 5.1/5.2/15.0 Upgrade Install redirect (EDB-50118 / Nessus ID 331587)
vuldb·2026-08-02·CVSS 4.3
CVE-2018-11784 [MEDIUM] Oracle Retail Order Broker 5.1/5.2/15.0 Upgrade Install redirect (EDB-50118 / Nessus ID 331587)
A vulnerability identified as problematic has been detected in Oracle Retail Order Broker 5.1/5.2/15.0. Affected is an unknown function of the component Upgrade Install. Performing a manipulation results in open redirect.
This vulnerability is reported as CVE-2018-11784. The attack is possible to be carried out remotely. Moreover, an exploit is present.
You should upgrade the affected component.
VulDB
Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
vuldb·2026-08-02·CVSS 4.3
CVE-2018-11784 [MEDIUM] Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
A vulnerability classified as problematic has been found in Oracle Hospitality Guest Access 4.2.0/4.2.1. This issue affects some unknown processing of the component Apache Tomcat. The manipulation leads to open redirect.
This vulnerability is listed as CVE-2018-11784. The attack may be initiated remotely. In addition, an exploit is available.
It is recommended to upgrade the affected component.
VulDB
Oracle Database Server 12.2.0.1/18c/19c Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
vuldb·2026-08-02·CVSS 4.3
CVE-2018-11784 [MEDIUM] Oracle Database Server 12.2.0.1/18c/19c Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
A vulnerability, which was classified as critical, was found in Oracle Database Server 12.2.0.1/18c/19c. This affects an unknown function of the component Apache Tomcat. Such manipulation leads to open redirect.
This vulnerability is listed as CVE-2018-11784. The attack may be performed from remote. In addition, an exploit is available.
You should upgrade the affected component.
VulDB
Oracle Retail Order Broker 5.1/5.2/15.0 System Administration redirect (EDB-50118 / Nessus ID 331587)
vuldb·2026-08-02·CVSS 4.3
CVE-2018-11784 [MEDIUM] Oracle Retail Order Broker 5.1/5.2/15.0 System Administration redirect (EDB-50118 / Nessus ID 331587)
A vulnerability categorized as problematic has been discovered in Oracle Retail Order Broker 5.1/5.2/15.0. This impacts an unknown function of the component System Administration. Such manipulation leads to open redirect.
This vulnerability is documented as CVE-2018-11784. The attack can be executed remotely. Additionally, an exploit exists.
It is advisable to upgrade the affected component.
VulDB
Oracle Instantis EnterpriseTrack 17.1/17.2/17.3 Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
vuldb·2026-08-02·CVSS 4.3
CVE-2018-11784 [MEDIUM] Oracle Instantis EnterpriseTrack 17.1/17.2/17.3 Apache Tomcat redirect (EDB-50118 / Nessus ID 331587)
A vulnerability has been found in Oracle Instantis EnterpriseTrack 17.1/17.2/17.3 and classified as problematic. This vulnerability affects unknown code of the component Apache Tomcat. Performing a manipulation results in open redirect.
This vulnerability is identified as CVE-2018-11784. The attack can be initiated remotely. Additionally, an exploit exists.
The affected component should be upgraded.
GHSA
Open Redirect
ghsa·2022-03-18·CVSS 4.3
CVE-2021-32645 [MEDIUM] CWE-601 Open Redirect
Open Redirect
### Impact
In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL.
This is only the case for installations where the default Hostname Identification is used and the environment uses tenants that have `force_https` set to `true` (default: `false`)
### Patches
Version 5.7.2 contains the relevant patches to fix this bug. Stripping the URL from special characters to prevent specially crafted URL's from being redirected to.
### Workarounds
There is a simple way to work around the security issue
- Set the `force_https` to every tenant to `false`
### References
https://nvd.nist.gov/vuln/detail/CVE-2018-11784
### For more information
If you have any questions or comments about this ad
OSV
Open Redirect
osv·2022-03-18·CVSS 4.3
CVE-2021-32645 [MEDIUM] Open Redirect
Open Redirect
### Impact
In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL.
This is only the case for installations where the default Hostname Identification is used and the environment uses tenants that have `force_https` set to `true` (default: `false`)
### Patches
Version 5.7.2 contains the relevant patches to fix this bug. Stripping the URL from special characters to prevent specially crafted URL's from being redirected to.
### Workarounds
There is a simple way to work around the security issue
- Set the `force_https` to every tenant to `false`
### References
https://nvd.nist.gov/vuln/detail/CVE-2018-11784
### For more information
If you have any questions or comments about this ad
OSV
Apache Tomcat Open Redirect vulnerability
osv·2018-10-17
CVE-2018-11784 [MEDIUM] Apache Tomcat Open Redirect vulnerability
Apache Tomcat Open Redirect vulnerability
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
GHSA
Apache Tomcat Open Redirect vulnerability
ghsa·2018-10-17
CVE-2018-11784 [MEDIUM] CWE-601 Apache Tomcat Open Redirect vulnerability
Apache Tomcat Open Redirect vulnerability
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
OSV
CVE-2018-11784: When the default servlet in Apache Tomcat versions 9
osv·2018-10-04·CVSS 4.3
CVE-2018-11784 [MEDIUM] CVE-2018-11784: When the default servlet in Apache Tomcat versions 9
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Ubuntu
Tomcat vulnerability
vendor_ubuntu·2018-10-10
CVE-2018-11784 Tomcat vulnerability
Title: Tomcat vulnerability
Summary: Tomcat could be made to redirect to arbitrary locations.
It was discovered that Tomcat incorrectly handled returning redirects to a
directory. A remote attacker could possibly use this issue with a specially
crafted URL to redirect to arbitrary URIs.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
tomcat: Open redirect in default servlet
vendor_redhat·2018-10-03·CVSS 4.3
CVE-2018-11784 [MEDIUM] CWE-99 tomcat: Open redirect in default servlet
tomcat: Open redirect in default servlet
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Package: tomcat (Red Hat BPM Suite 6) - Not affected
Package: tomcat6 (Red Hat Enterprise Linux 6) - Not affected
Package: tomcat (Red Hat Fuse 7) - Not affected
Package: jbossweb (Red Hat JBoss BRMS 5) - Not affected
Package: tomcat (Red Hat JBoss BRMS 6) - Not affected
Package: jbossweb (Red Hat JBoss Data Grid 6) - Out of support scope
Package: tomcat (Red Hat JBoss Data Grid 7) - Not affected
Package: jbossweb (Red Hat JBoss D
Debian
CVE-2018-11784: tomcat9 - When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to ...
vendor_debian·2018·CVSS 4.3
CVE-2018-11784 [MEDIUM] CVE-2018-11784: tomcat9 - When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to ...
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
Apache
Apache tomcat: CVE-2018-11784
vendor_apache·CVSS 4.3
CVE-2018-11784 [MEDIUM] Apache tomcat: CVE-2018-11784
Apache tomcat: CVE-2018-11784
When the default servlet returned a redirect to a directory (e.g. redirecting to /foo/ when the user requested /foo ) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. This was fixed in revision 1840056 . This issue was reported to the Apache Tomcat Security Team by Sergey Bobrov on 28 August 2018 and made public on 3 October 2018. Affects: 8.5.0 to 8.5.33 6 July 2018 Fixed in Apache Tomcat 8.0.53 Low: host name verification missing in WebSocket client
No detection rules found.
Exploit-DB
Apache Tomcat 9.0.0.M1 - Open Redirect
exploitdb·2021-07-13·CVSS 4.3
CVE-2018-11784 [MEDIUM] Apache Tomcat 9.0.0.M1 - Open Redirect
Apache Tomcat 9.0.0.M1 - Open Redirect
---
# Exploit Title: Apache Tomcat 9.0.0.M1 - Open Redirect
# Date: 10/04/2018
# Exploit Author: Central InfoSec
# Version: Apache Tomcat 9.0.0.M1 to 9.0.0.11, 8.5.0 to 8.5.33, and 7.0.23 to 7.0.90
# CVE : CVE-2018-11784
# Proof of Concept:
# Identify a subfolder within your application
http://example.com/test/
# Modify the URL to include at least 2 leading slashes before the subfolder and no trailing slash
http://example.com//test
# Browse to the newly created URL and the application will perform a redirection
http://test/
Nuclei
Apache Tomcat - Open Redirect
nuclei·CVSS 4.3
CVE-2018-11784 [MEDIUM] Apache Tomcat - Open Redirect
Apache Tomcat - Open Redirect
Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.
Template:
id: CVE-2018-11784
info:
name: Apache Tomcat - Open Redirect
author: geeknik
severity: medium
description: |
Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.
impact: |
An attacker can redirect users to malicious websites, leading to phishing attacks or the download of malware.
remediation: |
Upgrade to Apache Tomcat version 9.0.12 or later, or apply the relevant patch provided by the Apache Software Foundation.
reference:
- https://lists.apache.org/thread.html/23134c9b5a
HackerOne
Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
hackerone·2020-06-11·CVSS 4.3
[MEDIUM] Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
**Summary:**
There are multiple issues found on ███:
1. ███████/examples/ - Apache Tomcat examples are available for public. Multiple issues - session and cookies manipulation, internals IP disclosure.
2. Error page contains information about Apache Tomcat version
3. Reported Tomcat version is vulnerable. Multiple CVEs - critical, high and medium
**Description:**
1. Examples are available by link: ███████/examples/
2. Information disclosure about Apache Tomcat version
3. Vulnerable version Apache Tomcat/8.5.33
https://nvd.nist.gov/vuln/detail/CVE-2020-1938
Base Score: 9.8 CRITICALVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://nvd.nist.gov/vuln/detail/CVE-2019-0232
Base Score
Bugzilla
CVE-2018-11784 tomcat: Open redirect in default servlet [fedora-all]
bugzilla·2018-10-05·CVSS 4.3
CVE-2018-11784 [MEDIUM] CVE-2018-11784 tomcat: Open redirect in default servlet [fedora-all]
CVE-2018-11784 tomcat: Open redirect in default servlet [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedor
Bugzilla
CVE-2018-11784 tomcat: Open redirect in default servlet
bugzilla·2018-10-05·CVSS 4.3
CVE-2018-11784 [MEDIUM] CVE-2018-11784 tomcat: Open redirect in default servlet
CVE-2018-11784 tomcat: Open redirect in default servlet
A flaw was found in Apache tomcat. When the default servlet returned a redirect to a directory (e.g. redirecting to /foo/ when the user requested /foo) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
References:
https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3Cannounce.tomcat.apache.org%3E
Discussion:
Created tomcat tracking bugs for this issue:
Affects: epel-all [bug 1636514]
Affects: fedora-all [bug 1636513]
---
External References:
http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.12
http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.34
http://tomcat.apache.org/security-7.html#F
Bugzilla
CVE-2018-11784 tomcat: Open redirect in default servlet [epel-all]
bugzilla·2018-10-05·CVSS 4.3
CVE-2018-11784 [MEDIUM] CVE-2018-11784 tomcat: Open redirect in default servlet [epel-all]
CVE-2018-11784 tomcat: Open redirect in default servlet [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EP
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.htmlhttp://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.htmlhttp://www.securityfocus.com/bid/105524https://access.redhat.com/errata/RHSA-2019:0130https://access.redhat.com/errata/RHSA-2019:0131https://access.redhat.com/errata/RHSA-2019:0485https://access.redhat.com/errata/RHSA-2019:1529https://kc.mcafee.com/corporate/index?page=content&id=SB10284https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3Ehttps://lists.debian.org/debian-lts-announce/2018/10/msg00005.htmlhttps://lists.debian.org/debian-lts-announce/2018/10/msg00006.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/https://seclists.org/bugtraq/2019/Dec/43https://security.netapp.com/advisory/ntap-20181014-0002/https://usn.ubuntu.com/3787-1/https://www.debian.org/security/2019/dsa-4596https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.htmlhttp://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.htmlhttp://www.securityfocus.com/bid/105524https://access.redhat.com/errata/RHSA-2019:0130https://access.redhat.com/errata/RHSA-2019:0131https://access.redhat.com/errata/RHSA-2019:0485https://access.redhat.com/errata/RHSA-2019:1529https://kc.mcafee.com/corporate/index?page=content&id=SB10284https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3Ehttps://lists.debian.org/debian-lts-announce/2018/10/msg00005.htmlhttps://lists.debian.org/debian-lts-announce/2018/10/msg00006.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/https://seclists.org/bugtraq/2019/Dec/43https://security.netapp.com/advisory/ntap-20181014-0002/https://usn.ubuntu.com/3787-1/https://www.debian.org/security/2019/dsa-4596https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
2018-10-04
Published