The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "7.0.41"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.42"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.43"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.44"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.45"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.46"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.47"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.48"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.49"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.50"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.52"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.53"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.54"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.55"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.56"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.57"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.58"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.59"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.60"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.61"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.62"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.63"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.64"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.65"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.66"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.67"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.68"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.69"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.70"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.71"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.72"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.73"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.74"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.75"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.76"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.77"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.78"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.0"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.1"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.2"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.3"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.4"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.5"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.6"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.7"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.8"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.9"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.10"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.11"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.12"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.13"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.14"
},
{
"introduced": "0"
},
{
"last_affected": "8.5.15"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone1"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone10"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone11"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone12"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone13"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone14"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone15"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone16"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone17"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone18"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone19"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone2"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone20"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone21"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone3"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone4"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone5"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone6"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone7"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone8"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-milestone9"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.0-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.0-rc10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.0-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.0-rc5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.18"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.19"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.20"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.22"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.23"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.26"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.27"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.29"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.30"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.31"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.32"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.33"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.34"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.36"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.37"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.38"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.39"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.40"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.41"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.42"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.43"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0.44"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7674.json"