Sun Apr 28 2024 04:19:23 UTC
It's not a bug. It's an undocumented feature.
Hide Search Description
ID Product Comp Assignee Status Resolution Summary Changed
64009 Tomcat 8 Catalina dev RESO DUPL Embedded Tomcat has insecure default by activating JspServlet without opt-in 2019-12-17
One bug found.

as

File a new bug in the "Catalina" component of the "Tomcat 8" product