CVE-2008-4308
Apache Tomcat information disclosure vulnerability
EPSS 7.6%
描述
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
如何修補 CVE-2008-4308
要修補 CVE-2008-4308,請將受影響套件升級到下列已修補版本。
- Maven/org.apache.tomcat:tomcat—升級至 4.1.35 或更新版本
CVE-2008-4308 正在被利用嗎?
中等 — EPSS 為 7.6%,可持續追蹤但非最高優先。
受影響套件(1)
- >= 4.1.32, < 4.1.35