CVE-2024-54677

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.1 Apache Tomcat versions 10.1.0-M1 through 10.1.33 Apache Tomcat versions 9.0.0.M1 through 9.0.97

Description The issue is related to an uncontrolled resource consumption vulnerability in the examples web application provided with Apache Tomcat, leading to a denial of service. This can be exploited by a remote attacker to cause a service disruption.

Recommendations For Apache Tomcat versions 11.0.0-M1 through 11.0.1, upgrade to version 11.0.2. For Apache Tomcat versions 10.1.0-M1 through 10.1.33, upgrade to version 10.1.34. For Apache Tomcat versions 9.0.0.M1 through 9.0.97, upgrade to version 9.0.98.