{"vulnerability": "CVE-2020-17527", "sightings": [{"uuid": "b664feb7-e1b5-4795-b047-a511f907917b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17527", "type": "seen", "source": "https://t.me/cibsecurity/17125", "content": "\u203c CVE-2020-17527 \u203c\n\nWhile investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-03T22:26:23.000000Z"}, {"uuid": "46be64fa-e869-4e51-a792-8a681478588f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17527", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2327", "content": "#exploit\n1. CVE-2020-16842:\nCSRF protection bypass in iTop (ITSM & CMDB)\nhttps://sysdream.com/news/lab/2020-12-14-cve-2020-16842-csrf-protection-bypass-in-itop\n\n2. CVE-2020-17527:\nTomcat Information Leak\nhttps://bz.apache.org/bugzilla/show_bug.cgi?id=64830", "creation_timestamp": "2022-06-29T03:34:56.000000Z"}]}