cve.bz

CVE-2013-2071

no score yetEPSS 6.5%

apache tomcat: no CVSS score yet. EPSS 6.5% chance of exploitation in the next 30 days. Fixed in org.apache.tomcat:tomcat 7.0.40.

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
EPSS
6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3p5r-7cw3-2m67Mavenorg.apache.tomcat:tomcat>=7.0.0 <7.0.407.0.40

References

Check your stackJSON