13Mar
CVE-2024-24549 | Apache Tomcat up to 8.5.98/9.0.85/10.1.18/11.0.0-M16 HTTP/2 Request denial of service
A vulnerability was found in Apache Tomcat up to 8.5.98/9.0.85/10.1.18/11.0.0-M16. It has been classified as problematic. Affected is an unknown function of the component HTTP2 Request Handler. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-24549. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.