Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-52318

Good to know:

icon
icon

Date: November 18, 2024

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

Language: Java

Severity Score

Related Resources (13)

https://security.netapp.com/advisory/ntap-20250131-0009/
https://bz.apache.org/bugzilla/show_bug.cgi?id=69333
http://www.openwall.com/lists/oss-security/2024/11/18/4
https://github.com/apache/tomcat/commit/8d1fc4733a06d1a03b9d644c57010f2ec5f0df38
https://github.com/apache/tomcat/commit/9813c5dd3259183f659bbb83312a5cf673cc1ebf
https://security.netapp.com/advisory/ntap-20250131-0009
https://nvd.nist.gov/vuln/detail/CVE-2024-52318
https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9
https://tomcat.apache.org/security-11.html
https://github.com/apache/tomcat/commit/be8e32143a3159e78fe5463d09bb8e1b33bf2b1f
https://security-tracker.debian.org/tracker/CVE-2024-52318
https://github.com/apache/tomcat
https://www.mend.io/vulnerability-database/CVE-2024-52318

Severity Score

Weakness Type (CWE)

Inadequate Encryption Strength

CWE-326

Top Fix

icon

Upgrade Version

Upgrade to version org.apache.tomcat:tomcat-jasper:11.0.1;org.apache.tomcat:tomcat-jasper:9.0.97

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us