Description
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
Remediation
References
Related Vulnerabilities
WordPress Plugin Facebook Promotion Generator for WordPress 'fbActivate.php' SQL Injection (1.3.3)
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)
Atlassian Jira CVE-2020-14178 Vulnerability (CVE-2020-14178)
Payara URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-7312)
MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-9417)