title: Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.4 release and security update
description: apr: integer overflow/wraparound in apr_encode FileUpload: FileUpload DoS with excessive parts tomcat: not including the secure attribute causes information disclosure tomcat: Fix for CVE-2023-24998 was incomplete
cpes: cpe:/a:redhat:jboss_enterprise_web_server:5.7::el7 cpe:/a:redhat:jboss_enterprise_web_server:5.7::el8 cpe:/a:redhat:jboss_enterprise_web_server:5.7::el9