UpHeron
All vulnerabilities

Servers and applications

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular…

Severity
Medium 4.8
Published
24 Feb 2020
Last changed
25 Aug 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • From 7.0.98 up to 7.0.99
  • From 8.5.48 up to 8.5.50
  • From 9.0.28 up to 9.0.30

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-17569
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-17569