Vulnerability Database

289,598

Total vulnerabilities in the database

CVE-2024-52317

Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users.

This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92 through 9.0.95.

Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the issue.

No technical information available.

No CWE or OWASP classifications available.

Software From Fixed in
apache / tomcat 11.0.0-milestone23 11.0.0-milestone23.x
apache / tomcat 11.0.0-milestone24 11.0.0-milestone24.x
apache / tomcat 11.0.0-milestone25 11.0.0-milestone25.x
apache / tomcat 11.0.0-milestone26 11.0.0-milestone26.x
apache / tomcat 10.1.27 10.1.31
apache / tomcat 9.0.92 9.0.96