Apache Tomcat HTTP Request Smuggling Vulnerability (CVE-2021-33037) | Qualys
Apache Tomcat versions 10.0.0-M1 through 10.0.6, 9.0.0.M1 through 9.0.46, and 8.5.0 through 8.5.66 incorrectly parse the HTTP transfer-encoding request header in some circumstances, creating the possibility of HTTP Request Smuggling when Tomcat sits behind...