Threats tagged 'bit-tomcat-2026-103119'

A buffer under-read vulnerability in Apache Tomcat's AJP connector can cause the response body to be split between consecutive requests on the same connection. This may lead to failure of the second request and potential leakage of data from the first response to the second. The issue affects Apache Tomcat versions from 11.0.0 through 11.0.26 and is fixed in version 11.0.27.