What is GHSA-w97x-xfxf-f9xj?

GHSA-w97x-xfxf-f9xj is a security advisory published by GitHub Security Advisories with Medium severity. Jakarta Tomcat Denial of Service vulnerability

Which CVE IDs does GHSA-w97x-xfxf-f9xj cover?

GHSA-w97x-xfxf-f9xj covers the following CVE IDs: CVE-2003-0045. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-w97x-xfxf-f9xj?

GHSA-w97x-xfxf-f9xj affects 1 product, including: maven/org.apache.tomcat:tomcat:\u003c 3.3.1a.

GHSA-w97x-xfxf-f9xjMedium

Jakarta Tomcat Denial of Service vulnerability

Vendor

GitHub Security Advisories

Published

April 29, 2022

Last Modified

September 18, 2023

🔗 CVE IDs covered (1)

CVE-2003-0045 →

📋 Description

Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.

🎯 Affected products1

maven/org.apache.tomcat:tomcat:< 3.3.1a

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2003-0045
https://exchange.xforce.ibmcloud.com/vulnerabilities/12102
http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
https://github.com/advisories/GHSA-w97x-xfxf-f9xj