Apache Tomcat HTTP Request Smuggling (Client-Side Desync)

Recently, a critical vulnerability was discovered in Apache Tomcat, which was assigned the code CVE-2024-21733

https://hackerone.com/reports/2327341

Vulnerable:
from 8.5.7 through 8.5.63
from 9.0.0-M11 through 9.0.43

Patched: 8.5.64 and 9.0.44

#CVE #Tomcat