CVE-2024-21733

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

• CWE-209

• https://lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfzMailing List, Patch, Vendor Advisory
• http://packetstormsecurity.com/files/176951/Apache-Tomcat-8.5.63-9.0.43-HTTP-Response-Smuggling.html
• http://www.openwall.com/lists/oss-security/2024/01/19/2Mailing List, Patch, Third Party Advisory
• https://lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfzMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
• https://security.netapp.com/advisory/ntap-20240216-0005/

Published

Jan 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21728An Open Redirect vulnerability was found in osTicky2 below 2…6.1
• CVE-2024-21729Inadequate input validation leads to XSS vulnerabilities in …6.1
• CVE-2024-2173Out of bounds memory access in V8 in Google Chrome prior to …8.8
• CVE-2024-21730The fancyselect list field layout does not correctly escape …5.4
• CVE-2024-21731Improper handling of input could lead to an XSS vector in th…6.1
• CVE-2024-21732FlyCms through abbaa5a allows XSS via the permission managem…6.1
• CVE-2024-21734SAP Marketing (Contacts App) - version 160, allows an attack…5.4
• CVE-2024-21735SAP LT Replication Server - version S4CORE 103, S4CORE 104, …7.2
• CVE-2024-21736SAP S/4HANA Finance for (Advanced Payment Management) - vers…6.5
• CVE-2024-21737In SAP Application Interface Framework File Adapter - versio…9.1
• CVE-2024-21738SAP NetWeaver ABAP Application Server and ABAP Platform do n…5.4
• CVE-2024-21739Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32…5.3