CVE-2022-25762

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.

• CWE-404
• CWE-404

• https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7cMailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220629-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory
• https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7cMailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220629-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory

Published

May 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25757In Apache APISIX before 2.13.0, when decoding JSON with dupl…9.8
• CVE-2022-25758All versions of package scss-tokenizer are vulnerable to Reg…7.5
• CVE-2022-25759The package convert-svg-core before 0.6.2 are vulnerable to …9.8
• CVE-2022-2576In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.…7.5
• CVE-2022-25760All versions of package accesslog are vulnerable to Arbitrar…9.8
• CVE-2022-25761The package open62541/open62541 before 1.2.5, from 1.3-rc1 a…7.5
• CVE-2022-25763Improper Input Validation vulnerability in HTTP/2 request va…7.5
• CVE-2022-25765The package pdfkit from 0.0.0 are vulnerable to Command Inje…9.8
• CVE-2022-25766The package ungit before 1.5.20 are vulnerable to Remote Cod…8.8
• CVE-2022-25767All versions of package com.bstek.ureport:ureport2-console a…9.8
• CVE-2022-25768The logic in place to facilitate the update process via the …6.5
• CVE-2022-25769ImpactThe default .htaccess file has some restrictions in th…9.1