CVE-2024-21733

MEDIUM LAB

Apache Tomcat < 8.5.64 - Error Information Exposure

Title source: rule

Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

Exploits (1)

nomisec WORKING POC 27 stars
by LtmThink · poc
https://github.com/LtmThink/CVE-2024-21733

References (5)

Scores

CVSS v3 5.3
EPSS 0.7343
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Lab Environment

COMMUNITY
Community Lab
docker pull tomcat:9.0.43

Details

CWE
CWE-209
Status published
Products (4)
apache/tomcat 9.0.0 milestone11 (17 CPE variants)
apache/tomcat 8.5.7 - 8.5.64
org.apache.tomcat/tomcat-coyote 9.0.0-M11 - 9.0.44Maven
org.apache.tomcat.embed/tomcat-embed-core 8.5.7 - 8.5.64Maven
Published Jan 19, 2024
Tracked Since Feb 18, 2026