Description
Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.40 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117 , which fix the issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Cross-Site Request Forgery (3.4.1)
WordPress Plugin dsIDXpress IDX Multiple Unspecified Vulnerabilities (2.1.32)
Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-9664)
PHP CVE-2012-2688 Vulnerability (CVE-2012-2688)
LimeSurvey Improper Input Validation Vulnerability (CVE-2019-15640)