Ubuntu Security Update USN-6880-1: Tomcat vulnerability

[LinuxBot]

Sam Shahsavar discovered that Apache Tomcat did not properly reject HTTP requests with an invalid Content-Length header. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks.

Continue reading...