THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-33037 (MEDIUM 5.3) — Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign

[NVD] CVE-2021-33037 (MEDIUM 5.3) — Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign

lownvdPublished 2021-07-12

CVE-2021-33037 CVSS: 5.3 MEDIUM Published: 2021-07-12T15:15:08.400

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client decl

Indicators of compromise

CVE-2021-33037cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-33037