CVE-2024-21733: Generation of Error Message Containing Sensitive Information

January 19, 2024 (updated January 29, 2024)

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43.

Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

References

www.openwall.com/lists/oss-security/2024/01/19/2
github.com/advisories/GHSA-f4qf-m5gf-8jm8
lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfz
nvd.nist.gov/vuln/detail/CVE-2024-21733

Code Behaviors & Features

Detect and mitigate CVE-2024-21733 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →