[Snyk] Upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109 by snyk-bot · Pull Request #8 · thaadur/WebGoat

snyk-bot · 2022-12-20T20:13:40Z

Snyk has created this PR to upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 58 versions ahead of your current version.
The recommended version was released 2 years ago, on 2021-04-22.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Upload SNYK-JAVA-ORGAPACHETOMCAT-551994	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Arbitrary File Upload SNYK-JAVA-ORGAPACHETOMCAT-451607	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCAT-451530	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-451523	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Arbitrary Code Execution SNYK-JAVA-ORGAPACHETOMCAT-451514	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCAT-451507	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30950	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHETOMCAT-570036	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Arbitrary Code Execution SNYK-JAVA-ORGAPACHETOMCAT-460343	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-460342	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-451522	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Arbitrary Code Execution SNYK-JAVA-ORGAPACHETOMCAT-451516	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-31531	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30918	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30915	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-30913	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCAT-30911	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Denial of Service (DoS) SNYK-JAVA-ORGAPACHETOMCAT-30065	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Remote Code Execution SNYK-JAVA-ORGAPACHETOMCAT-174342	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHETOMCAT-1080636	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Directory Traversal SNYK-JAVA-ORGAPACHETOMCAT-30949	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Directory Traversal SNYK-JAVA-ORGAPACHETOMCAT-30948	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Arbitrary File Read SNYK-JAVA-ORGAPACHETOMCAT-30947	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
HTTP Request Smuggling SNYK-JAVA-ORGAPACHETOMCAT-30946	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Cache Poisoning SNYK-JAVA-ORGAPACHETOMCAT-460344	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Open Redirect SNYK-JAVA-ORGAPACHETOMCAT-459632	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-32115	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Directory Traversal SNYK-JAVA-ORGAPACHETOMCAT-32110	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30917	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Timing Attack SNYK-JAVA-ORGAPACHETOMCAT-30916	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-30914	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Directory Traversal SNYK-JAVA-ORGAPACHETOMCAT-30912	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30909	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-30908	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30901	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Improper Input Validation SNYK-JAVA-ORGAPACHETOMCAT-1316666	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Session Fixation SNYK-JAVA-ORGAPACHETOMCAT-538469	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Insecure Defaults SNYK-JAVA-ORGAPACHETOMCAT-32281	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-31421	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Arbitrary File Read SNYK-JAVA-ORGAPACHETOMCAT-30910	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Improper Authentication SNYK-JAVA-ORGAPACHETOMCAT-30906	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Improper Authentication SNYK-JAVA-ORGAPACHETOMCAT-30905	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Improper Authentication SNYK-JAVA-ORGAPACHETOMCAT-30904	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Access Restriction Bypass SNYK-JAVA-ORGAPACHETOMCAT-30903	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Cross-site Request Forgery (CSRF) SNYK-JAVA-ORGAPACHETOMCAT-30902	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Disclosure SNYK-JAVA-ORGAPACHETOMCAT-1060050	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Information Exposure SNYK-JAVA-ORGAPACHETOMCAT-30907	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	No Known Exploit
Cross-site Scripting (XSS) SNYK-JAVA-ORGAPACHETOMCAT-174805	715/1000 Why? Mature exploit, Has a fix available, CVSS 8.3	Mature

(*) Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109. See this package in Maven Repository: https://mvnrepository.com/artifact/org.apache.tomcat/tomcat-catalina/ See this project in Snyk: https://app.snyk.io/org/cyberpwn-nfr-shared/project/c0d33cab-7faf-4d7d-9b2e-3ca7ef448063?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109#8

[Snyk] Upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109#8
snyk-bot wants to merge 1 commit intomasterfrom
snyk-upgrade-50746d4cf9ef61d4e96c2524ddf8c513

snyk-bot commented Dec 20, 2022

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

snyk-bot commented Dec 20, 2022

Snyk has created this PR to upgrade org.apache.tomcat:tomcat-catalina from 7.0.27 to 7.0.109.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant