{"schema_version":"1.9.0","id":"CVE-2022-45143","published":"2023-01-03T18:12:28.351Z","modified":"2026-08-12T03:51:41.283305220Z","aliases":["BIT-tomcat-2022-45143","GHSA-rq2w-37h9-vg94"],"related":["SUSE-SU-2023:1853-1","openSUSE-SU-2024:12847-1","openSUSE-SU-2024:13441-1"],"summary":"Apache Tomcat: JsonErrorReportValve escaping","details":"The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/tomcat","events":[{"introduced":"11cce490eb67a8aca64377a22c0cea2e38896725"},{"fixed":"cd5fd93c5df3699868ec39731f5a347450112299"},{"introduced":"702df4f4db92b59e01d5d8824190ce2652d74a76"},{"last_affected":"934df02dc68e72b95a38f372017f1b89b0d13a76"}],"database_specific":{"cpe":["cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.83:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone1:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone10:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone11:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone12:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone13:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone14:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone15:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone16:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone17:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone2:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone3:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone4:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone7:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone8:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.0:milestone9:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.1.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0.40"},{"fixed":"9.0.69"},{"introduced":"8.5.83"},{"last_affected":"8.5.83"},{"introduced":"10.1.0-milestone1"},{"last_affected":"10.1.0-milestone1"},{"introduced":"10.1.0-milestone10"},{"last_affected":"10.1.0-milestone10"},{"introduced":"10.1.0-milestone11"},{"last_affected":"10.1.0-milestone11"},{"introduced":"10.1.0-milestone12"},{"last_affected":"10.1.0-milestone12"},{"introduced":"10.1.0-milestone13"},{"last_affected":"10.1.0-milestone13"},{"introduced":"10.1.0-milestone14"},{"last_affected":"10.1.0-milestone14"},{"introduced":"10.1.0-milestone15"},{"last_affected":"10.1.0-milestone15"},{"introduced":"10.1.0-milestone16"},{"last_affected":"10.1.0-milestone16"},{"introduced":"10.1.0-milestone17"},{"last_affected":"10.1.0-milestone17"},{"introduced":"10.1.0-milestone2"},{"last_affected":"10.1.0-milestone2"},{"introduced":"10.1.0-milestone3"},{"last_affected":"10.1.0-milestone3"},{"introduced":"10.1.0-milestone4"},{"last_affected":"10.1.0-milestone4"},{"introduced":"10.1.0-milestone5"},{"last_affected":"10.1.0-milestone5"},{"introduced":"10.1.0-milestone6"},{"last_affected":"10.1.0-milestone6"},{"introduced":"10.1.0-milestone7"},{"last_affected":"10.1.0-milestone7"},{"introduced":"10.1.0-milestone8"},{"last_affected":"10.1.0-milestone8"},{"introduced":"10.1.0-milestone9"},{"last_affected":"10.1.0-milestone9"},{"introduced":"10.1.1"},{"last_affected":"10.1.1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["10.1.0-milestone1","10.1.0-milestone10","10.1.0-milestone11","10.1.0-milestone12","10.1.0-milestone13","10.1.0-milestone14","10.1.0-milestone15","10.1.0-milestone16","10.1.0-milestone17","10.1.0-milestone2","10.1.0-milestone3","10.1.0-milestone4","10.1.0-milestone5","10.1.0-milestone6","10.1.0-milestone7","10.1.0-milestone8","10.1.0-milestone9","10.1.1","8.5.83"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45143.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45143.json"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45143"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202305-37"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230216-0009/"}],"database_specific":{"cna_assigner":"apache","cwe_ids":["CWE-116"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45143.json","unresolved_ranges":[{"extracted_events":[{"introduced":"10.1.0-M1"},{"last_affected":"10.1.1"},{"introduced":"9.0.40"},{"last_affected":"9.0.68"},{"introduced":"8.5.83"},{"last_affected":"8.5.83"}],"source":"AFFECTED_FIELD"}]}}