Description
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
Remediation
References
Related Vulnerabilities
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)
WordPress Plugin Secure HTML5 Video Player Cross-Site Scripting (3.3)
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-25315)
Apache Tomcat version older than 6.0.9
WordPress Plugin My Tickets Cross-Site Request Forgery (1.9.10)