Description

An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.

Remediation

References

CVE-2016-8747

Related Vulnerabilities

WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43714)

WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0)

WordPress Plugin WP Statistics Cross-Site Scripting (13.2.1)

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Arbitrary File Upload (5.3.14)

Severity

High

Classification

CVE-2016-8747 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities