CVE-2020-17527

7.5 highEPSS 25%

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

CVSS 3.1: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 25% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-25)
CWE: CWE-200
Published: 2020-12-03
Modified: 2026-10-08
Record from: the NVD, synced 2026-10-19

Affected

apache:tomcat
debian:debian_linux
netapp:element_plug-in
netapp:oncommand_system_manager
oracle:blockchain_platform
oracle:communications_cloud_native_core_binding_support_function
oracle:communications_cloud_native_core_policy
oracle:communications_instant_messaging_server
oracle:instantis_enterprisetrack
oracle:mysql_enterprise_monitor
oracle:sd-wan_edge
oracle:workload_manager

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-vvw4-rfwf-p6hx	Maven	org.apache.tomcat:tomcat-coyote	>=10.0.0-M1 <10.0.0-M10	10.0.0-M10
GHSA-vvw4-rfwf-p6hx	Maven	org.apache.tomcat:tomcat-coyote	>=9.0.0-M1 <9.0.40	9.0.40
GHSA-vvw4-rfwf-p6hx	Maven	org.apache.tomcat:tomcat-coyote	>=8.5.0 <8.5.60	8.5.60

References

Check your stack JSON