[
https://issues.apache.org/jira/browse/TOMEE-4230?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Richard Zowalla updated TOMEE-4230:
-----------------------------------
Fix Version/s: 9.1.1
> Backport fix for CVE-2023-34981
> -------------------------------
>
> Key: TOMEE-4230
> URL: https://issues.apache.org/jira/browse/TOMEE-4230
> Project: TomEE
> Issue Type: Dependency upgrade
> Components: TomEE Core Server
> Affects Versions: 9.1.0
> Reporter: Guzman Castanedo
> Assignee: Richard Zowalla
> Priority: Major
> Labels: CVE
> Fix For: 9.1.1
>
>
> Hello,
> We have seen that Apache Tomcat version 9.0.74 has a high vulnerability
> (CVE-2023-34981).
> Looking Apache TomEE version 8.0.15 it has a Apache Tomcat 9.0.74 inside.
> Is this version of TomEE affected by the CVE-2023-34981 vulnerability?
> It is planned to solve this CVE in TomEE 8.0.X?
> Thank you very much.
> Best regards.
> References:
> * [https://tomcat.apache.org/security-9.html]
> * [https://nvd.nist.gov/vuln/detail/CVE-2023-34981]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
