THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-25122 (HIGH 7.5) — When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results

[NVD] CVE-2021-25122 (HIGH 7.5) — When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results

lownvdPublished 2021-03-01

CVE-2021-25122 CVSS: 7.5 HIGH Published: 2021-03-01T12:15:13.793

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.

Indicators of compromise

CVE-2021-25122cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-25122