Description

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

Remediation

References

CVE-2012-0022

Related Vulnerabilities

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-36393)

WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.12)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Open Redirect (2.3.1)

XWiki Inadequate Encryption Strength Vulnerability (CVE-2022-29161)

Severity

Medium

Classification

CVE-2012-0022

Tags

Missing Update Known Vulnerabilities