Apache Tomcat information disclosure vulnerability
Low severity
GitHub Reviewed
Published
May 2, 2022
to the GitHub Advisory Database
•
Updated Feb 9, 2024
Package
Affected versions
>= 4.1.32, < 4.1.35
>= 5.5.10, < 5.5.21
Patched versions
4.1.35
5.5.21
Description
Published by the National Vulnerability Database
Feb 26, 2009
Published to the GitHub Advisory Database
May 2, 2022
Reviewed
Feb 9, 2024
Last updated
Feb 9, 2024
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
References