-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.tomcat:tomcat | maven | >= 7.0.0, < 7.0.2 | 7.0.2 |
| org.apache.tomcat:tomcat | maven | >= 5.5.0, < 5.5.30 | 5.5.30 |
| org.apache.tomcat:tomcat | maven | >= 6.0.0, < 6.0.28 | 6.0.28 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from two key issues: 1) In AbstractHttp11Processor, the filter iteration starting at index 2 instead of pluggableFilterIndex allowed internal filters to interfere with Transfer-Encoding header processing. 2) BufferedInputFilter's recycle method didn't check for null before recycling, leading to buffer management flaws. The commit patches explicitly address these locations by modifying the loop index and adding null checks, directly correlating with the described buffer recycling vulnerability.
A Semantic Attack on Google Gemini - Read the Latest Research