Re: [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

2025-07-11 Thread Christopher Schultz
Mark, Oops, I'm sorry I didn't see this correction and just sent one of my own. :( -chris On 7/10/25 3:18 PM, Mark Thomas wrote: Correcting typo in fixed versions CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected:

[SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload [CORRECTION]

2025-07-11 Thread Christopher Schultz
CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.8 Apache Tomcat 10.1.0-M1 to 10.1.42 Apache Tomcat 9.0.0.M1 to 9.0.106 Description: For some unlikely configurations of multipart uploa

Re: [EXTERNAL] [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

2025-07-11 Thread Christopher Schultz
Joey, On 7/10/25 3:14 PM, Joey Cochran wrote: Is this accurate? Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.42 Mitigation: - Upgrade to Apache Tomcat 10.1.32 or later Nope, this should be "Upgrade to 10.1.43 or later". Thanks for noticing; we'll get this corrected anywhere it needs t

[SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

2025-07-10 Thread Mark Thomas
Correcting typo in fixed versions CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.8 Apache Tomcat 10.1.0-M1 to 10.1.42 Apache Tomcat 9.0.0.M1 to 9.0.106 Description: For some unlikel

Re: [EXTERNAL] [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

2025-07-10 Thread Joey Cochran
] CVE-2025-52520 Apache Tomcat - DoS in multipart upload CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.8 Apache Tomcat 10.1.0-M1 to 10.1.42 Apache Tomcat 9.0.0.M1 to 9.0.106

[SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

2025-07-10 Thread Mark Thomas
CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.8 Apache Tomcat 10.1.0-M1 to 10.1.42 Apache Tomcat 9.0.0.M1 to 9.0.106 Description: For some unlikely configurations of multipart uploa