Description
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-2144 Vulnerability (CVE-2021-2144)
WordPress Plugin Cf7Save Extension Cross-Site Scripting (1.0)
Python Improper Encoding or Escaping of Output Vulnerability (CVE-2020-26116)
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1614)