The upgrade notes sometimes elude to the bundled Tomcat version, but nothing for Crowd 4.3.
What version of Tomcat is bundled with Crowd 4.3 and is it possible to patch the apache-tomcat folder of an existing installation with a newer Tomcat version (i.e. one that addresses security vulnerabilities)?
