CVE-2013-4590 @ Maven-org.apache.tomcat:tomcat-catalina-7.0.27

[cxronen]

Vulnerable Package issue exists @ Maven-org.apache.tomcat:tomcat-catalina-7.0.27 in branch master

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Namespace: cxronen
Repository: BookStore_VSCode
Repository Url: https://github.com/cxronen/BookStore_VSCode
CxAST-Project: cxronen/BookStore_VSCode
CxAST platform scan: 8da575ca-6c79-4d57-ae63-b0e053c9ba06
Branch: master
Application: BookStore_VSCode
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-200

---

Additional Info
Remediation Upgrade Recommendation: 7.0.109

---

References
Commit
Release Note
Release Note
Release Note