[SECURITY] CVE-2022-34305 Apache Tomcat - XSS in examples web application

2022-06-23 Thread Mark Thomas
CVE-2022-34305 Apache Tomcat - XSS in examples web application Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.0-M16 Apache Tomcat 10.0.0-M1 to 10.0.22 Apache Tomcat 9.0.30 to 9.0.64 Apache Tomcat 8.5.50 to 8.5.81 Description: The Form au

Re: Precompile JSP error using webapp-jspc.ant.xml (tomcat stuffed)

2022-06-23 Thread Markus Reich
thx, switching to v9 solves the problems :-) Am Do., 23. Juni 2022 um 09:12 Uhr schrieb Rob Sargent < rsarg...@xmission.com>: > > > > On Jun 23, 2022, at 12:53 AM, Markus Reich > wrote: > > > > yes, it seems that in the pom tomcat 10 is specified, does this make any > > difference? > > 10.0.18

AW: Precompile JSP error using webapp-jspc.ant.xml (tomcat stuffed)

2022-06-23 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, > -Ursprüngliche Nachricht- > Von: Markus Reich > Gesendet: Donnerstag, 23. Juni 2022 08:53 > An: Tomcat Users List > Betreff: Re: Precompile JSP error using webapp-jspc.ant.xml (tomcat > stuffed) > > yes, it seems that in the pom tomcat 10 is specified, does this make any > diff

Re: Precompile JSP error using webapp-jspc.ant.xml (tomcat stuffed)

2022-06-23 Thread Rob Sargent
> On Jun 23, 2022, at 12:53 AM, Markus Reich wrote: > > yes, it seems that in the pom tomcat 10 is specified, does this make any > difference? > 10.0.18 > >> Am Do., 23. Juni 2022 um 08:30 Uhr schrieb Rob Sargent < >> rsarg...@xmission.com>: >> >> Yes. Quite big difference between v9 and