Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-1935

CVE-2020-1935: Potential HTTP request smuggling in Apache Tomcat

4.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-1935
GHSA ID
GHSA-qxf4-chvg-4r8r
EPSS Score
0.68999%
CWE
CWE-444
Published
2/28/2020
Updated
2/1/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.apache.tomcat.embed:tomcat-embed-coremaven< 7.0.1007.0.100
org.apache.tomcat.embed:tomcat-embed-coremaven>= 8.0.0, < 8.5.518.5.51
org.apache.tomcat.embed:tomcat-embed-coremaven>= 9.0.0, < 9.0.319.0.31
org.apache.tomcat:tomcatmaven< 7.0.1007.0.100
org.apache.tomcat:tomcatmaven>= 8.0.0, < 8.5.518.5.51
org.apache.tomcat:tomcatmaven>= 9.0.0, < 9.0.319.0.31

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

In *p**** Tom**t *.*.*.M* to *.*.**, *.*.* to *.*.** *n* *.*.* to *.*.** t** *TTP *****r p*rsin* *o** us** *n *ppro*** to *n*-o*-lin* p*rsin* t**t *llow** som* inv*li* *TTP *****rs to ** p*rs** *s v*li*. T*is l** to * possi*ility o* *TTP R*qu*st Smu*

Reasoning

No *n*lysis *v*il**l*