René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CX: CVE-2021-30639 in Maven-org.apache.tomcat:tomcat-coyote and 9.0.22 @ JavaVulnerableLab.refs/heads/master","articleBody":"**Description**\r\n\r\nA vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I/O are not exposed to this vulnerability. This issue affects Apache Tomcat 7.0.X, 8.0.X, 8.5.X before 8.5.65, 9.0.X before 9.0.45 and 10.0.X before 10.0.5.\r\n\r\n**HIGH Vulnerable Package** issue exists @ **org.apache.tomcat:tomcat-coyote** in branch **refs/heads/master**\r\n\r\n**Vulnerability ID:** CVE-2021-30639\r\n\r\n**Package Name:** org.apache.tomcat:tomcat-coyote\r\n\r\n**Severity:** HIGH\r\n\r\n**CVSS Score:** 7.5\r\n\r\n**Publish Date:** 2021-07-12T15:15:00\r\n\r\n**Current Package Version:** 9.0.22\r\n\r\n**Remediation Upgrade Recommendation:** 9.0.48\r\n\r\n[Link To SCA](https://sca.scacheckmarx.com/#/projects/43c66723-1c23-4989-9e51-bfa32766271e/reports/e3c3068d-3289-466b-aa0f-b9c2cf00b4ea/vulnerabilities/CVE-2021-30639%3AMaven-org.apache.tomcat%3Atomcat-coyote-9.0.22/vulnerabilityDetails/vulnerabilities/CVE-2021-30639%3AMaven-org.apache.tomcat%3Atomcat-coyote-9.0.22/vulnerabilityDetails)\r\n\r\n[Reference – NVD link](https://nvd.nist.gov/vuln/detail/CVE-2021-30639)\r\n\r\n","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2022-03-01T18:57:58.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":7},"url":"https://github.com/43/JavaVulnerableLab/issues/43"}