VDB
DEBIAN-CVE-2024-52317
DEBIAN-CVE-2024-52317
PUBLISHED
CVSS 6.5 MEDIUM
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92 through 9.0.95. Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the issue.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | tomcat10 | 0, 0 |
| Debian:13 | tomcat10 | 0, 0 |
Exploit Intelligence
- CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability (github-poc)
- dimage.html (github-poc)
Timeline
- Nov 18, 2024 CVE Published
- Apr 28, 2026 CVE Updated