CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. Its EPSS score suggests a 18.1% probability of exploitation in the next 30 days.
CVE
CVE-2021-25122
Severity
HIGH
CVSS
7.5
EPSS
18.11%
Apache
Original NVD Description
When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)