Skip to content

Upgrade to at least spring boot 3.3.7, security issue Apache tomcat CVE-2024-50379 #2048

@ilovewindsurfai

Description

@ilovewindsurfai

Description

A CVE was detected on versions Tomcat 9 10 and 11 : [CVE - CVE-2024-50379] (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50379)

This dependancy is brought by sprint-boot-starter-tomcat from spring-boot-starter-web.

Can you please upgrade to at least spring boot starter web 3.3.7 to prevent this issue ?

Implementation ideas

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions