Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat POST Data 信息泄露漏洞
Vulnerability Description
Apache Tomcat是应用(java)服务器，它只是一个servlet(jsp也翻译成servlet)容器，可以认为是apache的扩展，但是可以独立于apache运行。 Apache Tomcat 4.1.32版本至4.1.34版本和5.5.10版本至5.5.20版本的doRead程序在某一错误情况发生时，没有返回一个-1来指示，这会引起Tomcat从一个请求向一个不同的请求发送POST内容。
CVSS Information
N/A
Vulnerability Type
N/A