https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:56:02.275236+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-7674 CVE-2017-7674 2026-09-28T08:56:02.277277+00:00

Affected: Apache Software Foundation Apache Tomcat

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.