Skip to content

[Snyk] Security upgrade org.apache.tomcat:tomcat-coyote from 9.0.22 to 9.0.86#141

Open
tyleragypt wants to merge 1 commit intomasterfrom
snyk-fix-ffc360b1fb939c0f3a40abe0b308698c
Open

[Snyk] Security upgrade org.apache.tomcat:tomcat-coyote from 9.0.22 to 9.0.86#141
tyleragypt wants to merge 1 commit intomasterfrom
snyk-fix-ffc360b1fb939c0f3a40abe0b308698c

Conversation

@tyleragypt
Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
high severity 575/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JAVA-ORGAPACHETOMCAT-6435949
org.apache.tomcat:tomcat-coyote:
9.0.22 -> 9.0.86
No No Known Exploit No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

@tyleragypt
Copy link
Copy Markdown
Owner Author

Logo
Checkmarx One – Scan Summary & Details660e07e2-582c-4f12-af98-582bdf968bec

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH ALB Listening on HTTP /infrostructure.tf: 21 AWS Application Load Balancer (alb) should not listen on HTTP
MEDIUM Unpinned Actions Full Length Commit SHA /cx.yml: 13 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
LOW Lambda Functions Without X-Ray Tracing /lambda.tf: 12 AWS Lambda functions should have TracingConfig enabled. For this, property 'tracing_Config.mode' should have the value 'Active'

Fixed Issues

Severity Issue Source File / Package
HIGH ALB Listening on HTTP /infrostructure.tf: 21
HIGH ALB Listening on HTTP /infrostructure.tf: 27
HIGH Passwords And Secrets - Generic Password /docker-compose.yml: 11
HIGH S3 Bucket Allows All Actions From All Principals /s3_with_all_permissions.tf: 5
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
HIGH SQL_Injection /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
HIGH SQL_Injection /src/main/webapp/vulnerability/Injection/orm.jsp: 50
HIGH SQL_Injection /src/main/webapp/admin/adminlogin.jsp: 11
HIGH SQL_Injection /src/main/webapp/admin/adminlogin.jsp: 11
HIGH SQL_Injection /src/main/webapp/admin/adminlogin.jsp: 11
HIGH SQL_Injection /src/main/webapp/admin/adminlogin.jsp: 11
MEDIUM Absolute_Path_Traversal /src/main/webapp/vulnerability/idor/download.jsp: 11
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 45
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java: 43
MEDIUM CSRF /src/main/webapp/changeCardDetails.jsp: 37
MEDIUM CSRF /src/main/webapp/vulnerability/csrf/changepassword.jsp: 33
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 60
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 46
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java: 44
MEDIUM CSRF /src/main/webapp/changeCardDetails.jsp: 38
MEDIUM CSRF /src/main/webapp/vulnerability/forum.jsp: 41
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 47
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java: 45
MEDIUM CSRF /src/main/webapp/vulnerability/idor/change-email.jsp: 27
MEDIUM CSRF /src/main/webapp/changeCardDetails.jsp: 39
MEDIUM CSRF /src/main/webapp/admin/manageusers.jsp: 13
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 61
MEDIUM CSRF /src/main/webapp/vulnerability/forum.jsp: 42
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 43
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 43
MEDIUM CSRF /src/main/webapp/vulnerability/idor/change-email.jsp: 28
MEDIUM CSRF /src/main/webapp/admin/adminlogin.jsp: 12
MEDIUM CSRF /src/main/webapp/admin/adminlogin.jsp: 12
MEDIUM CSRF /src/main/webapp/vulnerability/csrf/change-info.jsp: 26
MEDIUM CSRF /src/main/webapp/vulnerability/forum.jsp: 43
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 44
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java: 42
MEDIUM CSRF /src/main/webapp/admin/adminlogin.jsp: 11
MEDIUM CSRF /src/main/webapp/admin/adminlogin.jsp: 11
MEDIUM CSRF /src/main/webapp/admin/adminlogin.jsp: 11
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 54
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 56
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM CSRF /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 57
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 59
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 59
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 63
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 59
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 63
MEDIUM HttpOnlyCookies /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 64
MEDIUM HttpOnlyCookies

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants