CVE: 2021-33037 found in tomcat-embed-core - Version: 9.0.36 [JAVA]

[Rajkumarr77]

Veracode Software Composition Analysis

Attribute	Details
Library	tomcat-embed-core
Description	Core Tomcat implementation
Language	JAVA
Vulnerability	Request Smuggling
Vulnerability description	tomcat-coyote is vulnerable request smuggling. Incorrect way of parsing of the HTTP transfer-encoding request header causes request smuggling when it is used with a reverse proxy and if the client declared it would only accept an HTTP/1.0 response.
CVE	2021-33037
CVSS score	5
Vulnerability present in version/s	9.0.0.M1-9.0.47
Found library version/s	9.0.36
Vulnerability fixed in version	9.0.48
Library latest version	11.0.9
Fix	Apply the fixes below.

Links:

• https://sca.analysiscenter.veracode.com/vulnerability-database/libraries/1334?version=9.0.36
• https://sca.analysiscenter.veracode.com/vulnerability-database/vulnerabilities/31434
• Patch: