Test ID:	1.3.6.1.4.1.25623.1.0.149062
Category:	Web Servers
Title:	Apache Tomcat JsonErrorReportValve Injection Vulnerability (Jan 2023) - Windows
Summary:	Apache Tomcat is prone to a JsonErrorReportValve injection; vulnerability.
Description:	Summary: Apache Tomcat is prone to a JsonErrorReportValve injection vulnerability. Vulnerability Insight: The JsonErrorReportValve did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output. Affected Software/OS: Apache Tomcat version 8.5.83 only, 9.0.40 through 9.0.68 and 10.1.0-M1 through 10.1.1. Solution: Update to version 8.5.84, 9.0.69, 10.1.2 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-45143 https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj https://security.gentoo.org/glsa/202305-37
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.