high7.5
CVE-2022-45143
Apache Tomcat improperly escapes input from JsonErrorReportValve
Impact
The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 does not escape the `type`, `message` or `description` values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.tomcat.embed:tomcat-embed-core | = 8.5.83 | 8.5.84 |
| maven | org.apache.tomcat:tomcat-catalina | >= 10.1.0, <= 10.1.1 | 10.1.2 |
| maven | org.apache.tomcat:tomcat-util | = 8.5.83 | 8.5.84 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Tomcat | from 9.0.40 before 9.0.69 Versions 8.5.83, 10.1.0, 10.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj
- https://security.gentoo.org/glsa/202305-37
- https://security.netapp.com/advisory/ntap-20230216-0009/
- https://github.com/advisories/GHSA-rq2w-37h9-vg94
- https://nvd.nist.gov/vuln/detail/CVE-2022-45143
- https://github.com/apache/tomcat/commit/0cab3a56bd89f70e7481bb0d68395dc7e130dbbf
- https://github.com/apache/tomcat/commit/6a0ac6a438cbbb66b6e9c5223842f53bf0cb50aa
- https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e