Description
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.tomcat:tomcat | >= 4.1.32, < 4.1.35 | 4.1.35 | GHSA-7g59-hm8v-cwmc |
| Maven | org.apache.tomcat:tomcat | >= 5.5.10, < 5.5.21 | 5.5.21 | GHSA-7g59-hm8v-cwmc |
References
- JVN#66905322 third-party-advisory
- ADV-2009-0541 vdb-entry
- JVNDB-2009-000010 third-party-advisory
- https://issues.apache.org/bugzilla/show_bug.cgi?id=40771
- 34057 third-party-advisory
- 20090225 [SECURITY] CVE-2008-4308: Tomcat information disclosure vulnerability mailing-list
- 33913 vdb-entry
- [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ mailing-list