| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tomcat:tomcat | ≥ 4.1.32, < 4.1.35≥ 5.5.10, < 5.5.21 | 4.1.355.5.21 |
| tomcat | = 4.1.32= 4.1.33= 4.1.34= 5.5.10= 5.5.11= 5.5.12= 5.5.13= 5.5.14= 5.5.15= 5.5.16= 5.5.17= 5.5.18= 5.5.19= 5.5.20 |
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free