WHD: Vulnerabilities CVE-2024-34750 & CVE-2024-38286 in Tomcat version in Web Help Desk 12.8.3 HF3

Two vulnerabilities; CVE-2024-34750 & CVE-2024-38286 have been identified in Tomcat version currently bundled with WHD 12.8.3 and older.
The two vulnerabilities have been mitigated in the newly released Tomcat version 9.0.93.

Tomcat is upgraded to the fix version -Tomcat 9.0.93 - in WHD 12.8.4. You can upgrade Tomcat externally (not supported) with the steps below.
 
Steps to manually complete an in-place Tomcat upgrade:

1. Stop the server.
2. Go to bin folder under the WebHelpdesk folder
3. Change the tomcat folder name to tomcat_old (later we will take a file from here)
4. Download tomcat 9.0.93 from https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.93/bin/apache-tomcat-9.0.93.zip
5. Extract this zip - it will contain a folder named apache-tomcat-9.0.93
6. Copy the entire folder “apache-tomcat-9.0.93” to the <WebHelpDesk>\bin folder (from step 2)
7. Rename the folder from “apache-tomcat-9.0.93” to “tomcat”
8. Copy the file tomcat-sorting-cl-1.0.0.jar and logger.jar that is located under <WebHelpDesk>\tomcat_old/lib into <WebHelpDesk>\tomcat/lib
9. Start the server.