CVE2023-24998 configuration

2023-02-28 Thread A Name
Just to confirm - I saw you incorporated fixes for that CVE into recent Tomcats. Is there a setting in Server or Web.xml for these or do they need to be set programmatically within an application using the functions in Commons-FileUpload? Abt

Re: CVE2023-24998 configuration

2023-02-28 Thread A Name
uld be sufficient to mitigate the issue. > > You can, of course, set the limit lower if you like (maxParameterCount > on the Connector(s) in server.xml). > > Mark > > > On 28/02/2023 16:24, A Name wrote: > > Just to confirm - I saw you incorporated fixes for that CVE into re

Re: global web.xml question

2025-04-28 Thread A Name
On Mon, Apr 28, 2025 at 9:32 AM Mark Thomas wrote: > > On 28/04/2025 14:05, A Name wrote: > > > We are looking at adding a second instance of our app (named > differently -- > > > myappA and myappB) to our Tomcat 9. We currently have the app > installed at > &

Re: global web.xml question

2025-04-30 Thread A Name
On Tue, Apr 29, 2025 at 1:07 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > > ABT, > > > > On 4/29/25 11:25 AM, A Name wrote: > > > On Tue, Apr 29, 2025 at 10:54 AM Christopher Schultz < > > > ch...@christopherschultz.net> wrote:

global web.xml question

2025-04-28 Thread A Name
We are looking at adding a second instance of our app (named differently -- myappA and myappB) to our Tomcat 9. We currently have the app installed at a number of customer locations, we are looking at dropping 1 app Currently, our database connections are established inside the GLOBAL web.xml in

Re: global web.xml question

2025-04-29 Thread A Name
On Mon, Apr 28, 2025 at 1:07 PM Mark Thomas wrote: > > On 28/04/2025 16:35, Christopher Schultz wrote: > > > ABT, > > > > > > On 4/28/25 9:05 AM, A Name wrote: > > >> We are looking at adding a second instance of our app (named > > >> diff

Re: global web.xml question

2025-04-29 Thread A Name
On Tue, Apr 29, 2025 at 10:54 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > > ABT, > > > On 4/29/25 8:23 AM, A Name wrote: > > > On Mon, Apr 28, 2025 at 1:07 PM Mark Thomas wrote: > > > > > >>> On 28/04/2025 16:35, Christoph