smartiworld / tomcat-8.5.76

tomcat-8.5.76源码

Welcome to Apache Tomcat!

What Is It?

The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are developed under the Java Community Process.

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here or keep reading.

Apache Tomcat software powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

Get It

For every major Tomcat version there is one download page containing links to the latest binary and source code downloads, but also links for browsing the download directories and archives:

• Tomcat 10
• Tomcat 9
• Tomcat 8
• Tomcat 7

To facilitate choosing the right major Tomcat version one, we have provided a version overview page.

Documentation

The documentation available as of the date of this release is included in the docs webapp which ships with tomcat. You can access that webapp by starting tomcat and visiting http://localhost:8080/docs/ in your browser. The most up-to-date documentation for each version can be found at:

• Tomcat 10.1
• Tomcat 10.0
• Tomcat 9
• Tomcat 8

Installation

Please see RUNNING.txt for more info.

Licensing

Please see LICENSE for more info.

Support and Mailing List Information

• Free community support is available through the tomcat-users email list and a dedicated IRC channel (#tomcat on Freenode).

• If you want freely available support for running Apache Tomcat, please see the resources page here.

• If you want to be informed about new code releases, bug fixes, security fixes, general news and information about Apache Tomcat, please subscribe to the tomcat-announce email list.

• If you have a concrete bug report for Apache Tomcat, please see the instructions for reporting a bug here.

Contributing

Please see CONTRIBUTING for more info.

tomcat-8.5.76's Issues

同学，您这个项目引入了7个开源组件，存在2个漏洞，辛苦升级一下

检测到 smartiworld/tomcat-8.5.76 一共引入了7个开源组件，存在2个漏洞

漏洞标题：Apache Ant信息泄露漏洞
缺陷组件：org.apache.ant:[email protected]
漏洞编号：CVE-2020-1945
漏洞描述：Apache Ant是美国阿帕奇软件（Apache Software）基金会的一套用于Java软件开发的自动化工具。该工具主要用于软件的编译、测试和部署等。
Apache Ant 1.1版本至1.9.14版本和1.10.0版本至1.10.7版本中存在安全漏洞。攻击者可利用该漏洞泄漏敏感信息。 
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-46282
影响范围：[1.1, 1.9.15)
最小修复版本：1.9.15
缺陷组件引入路径：org.apache.tomcat:[email protected]>org.apache.ant:[email protected]

另外还有2个漏洞，详细报告：https://mofeisec.com/jr?p=ae25a3