Summary A defect in a bug fix in Apache Tomcat caused the AJP proxy to use response headers from the previous request, resulting in information leakage if the response did not include any HTTP headers...
Summary Apache Tomcat misconfigurations may ignore invalid HTTP headers by setting rejectIllegalHeader to false. Tomcat will not reject requests with invalid Content-Length headers, making a request...
Summary In OpenSSH, due to a missing character encoding in the progress display, a malicious server can employ crafted object names to manipulate the client output. This affects refresh_progress_meter...
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
