tomcat安全情报的收集
1、首先定期查看官网各个版本存在的安全漏洞公告：
http://tomcat.apache.org/security.html
2、去各大漏洞网站查看漏洞披露信息
看几个漏洞：
https://bbs.aliyun.com/read/536282.html?page=e
http://www.freebuf.com/vuls/148283.html
https://paper.seebug.org/category/vul-analysis/
https://mp.weixin.qq.com/s?__biz=MzI3MTEwODc5Ng==&mid=2650859546&idx=1&sn=8950aa1a62c7688d90ea439af670cd92&chksm=f13297c9c6451edf5abf84bddd4bc5b4258dc71bf6b87eb9d357616e69d82ce5dc5de4cd9935#rd