CVE-2021-33037
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.
- CVSS 3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - EPSS
- 75% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)
- CWE
- CWE-444
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
- apache:tomee
- debian:debian_linux
- mcafee:epolicy_orchestrator
- oracle:agile_product_lifecycle_management
- oracle:communications_cloud_native_core_policy
- oracle:communications_cloud_native_core_service_communication_proxy
- oracle:communications_diameter_signaling_router
- oracle:communications_instant_messaging_server
- oracle:communications_policy_management
- oracle:communications_pricing_design_center
- oracle:communications_session_report_manager
- oracle:communications_session_route_manager
- oracle:graph_server_and_client
- oracle:healthcare_translational_research
- oracle:hospitality_cruise_shipboard_property_management_system
- oracle:instantis_enterprisetrack
- oracle:managed_file_transfer
- oracle:mysql_enterprise_monitor
- oracle:sd-wan_edge
- oracle:secure_global_desktop
- oracle:utilities_testing_accelerator
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4vww-mc66-62m6 | Maven | org.apache.tomcat:tomcat | >=10.0.0-M1 <10.0.7 | 10.0.7 |
| GHSA-4vww-mc66-62m6 | Maven | org.apache.tomcat:tomcat | >=9.0.0-M1 <9.0.48 | 9.0.48 |
| GHSA-4vww-mc66-62m6 | Maven | org.apache.tomcat:tomcat | >=8.5.0 <8.5.68 | 8.5.68 |
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10366
- https://lists.apache.org/thread.html/r290aee55b72811fd19e75ac80f6143716c079170c5671b96932ed44b%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r40f921575aee8d7d34e53182f862c45cbb8f3d898c9d4e865c2ec262%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r612a79269b0d5e5780c62dfd34286a8037232fec0bc6f1a7e60c9381%40%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rc6ef52453bb996a98cb45442871a1db56b7c349939e45d829bf9ae37%40%3Ccommits.tomee.apache.org%3E