-
Bug
-
Resolution: Fixed
-
Medium
-
None
-
None
-
11
-
Severity 2 - Major
-
Tomcat 8.0.33 is vulnerable to CVE-2016-3092: Apache Commons Fileupload information disclosure vulnerability
We need to upgrade the version we distribute with Confluence to 8.0.36. As usual with Tomcat upgrades, this involves uploading our own maven artifact based on the 8.0.36 windows x86 zip, updating the builds for stable to use this artifact, then updating the distribution.