Debian Linux Security Advisory 2207-1 – Various vulnerabilities have been discovered in the Tomcat Servlet and JSP engine, resulting in denial of service, cross-site scripting, information disclosure and WAR file traversal.
Source: Debian Security Advisory 2207-1
