Servers and applications
CVE-2017-5664
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the original HTTP method. If the error page is a static file, expected behaviour is to serve content of the…
- Severity
- High 7.5
- Published
- 6 Jun 2017
- Last changed
- 15 Oct 2026
- Added to UpHeron
- 21 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Apache TomcatServers and applications · cpe:a:apache:tomcat |
All 161 release lines
|