Description

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

Remediation

References

CVE-2012-0022

Related Vulnerabilities

WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Cross-Site Scripting (1.6.9)

WordPress Plugin WordPress Infinite Scroll-Ajax Load More Cross-Site Scripting (5.6.0.2)

Zenphoto Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5595)

Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-5247)

WordPress Plugin Woocommerce Category Banner Management Security Bypass (1.1.1)

Severity

Medium

Classification

CVE-2012-0022

Tags

Missing Update Known Vulnerabilities