CVE-2024-23672 @ Maven-org.apache.tomcat.embed:tomcat-embed-core-9.0.53

[SamHeadrickCx]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2024-23672
Checkmarx Project: SamHeadrickCx/easybuggy4sb
Repository URL: https://github.com/SamHeadrickCx/easybuggy4sb
Branch: master
Scan ID: 94cbf8fd-fbe8-49c7-9c55-da0658f9cbfc

---

Denial of Service via an incomplete cleanup vulnerability in Apache Tomcat. WebSocket clients could keep WebSocket connections open leading to increased resource consumption. This issue affects Apache Tomcat: tomcat-embed-core, tomcat-embed-websocket and tomcat-websocket versions 8.5.0 through 8.5.98, 9.0.0-M1 through 9.0.85, 10.1.0-M1 through 10.1.18 and 11.0.0-M1 through 11.0.0-M16, and tomcat7-websocket versions 7.0.47 through 7.0.109.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: HIGH
Availability impact: NONE
Remediation Upgrade Recommendation: 9.0.86