cve/2024/CVE-2024-21733.md

CVE-2024-21733

Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43.Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

POC

Reference

• http://packetstormsecurity.com/files/176951/Apache-Tomcat-8.5.63-9.0.43-HTTP-Response-Smuggling.html

Github

• https://github.com/1N3/1N3
• https://github.com/Marco-zcl/POC
• https://github.com/Ostorlab/KEV
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/versio-io/product-lifecycle-security-api
• https://github.com/wjlin0/poc-doc
• https://github.com/wy876/POC