VDB
GCVE-VVD-MAGEIA-2017-352
GCVE-VVD-MAGEIA-2017-352
Advisory Published
The CORS Filter did not add an HTTP Vary header indicating that the
response varies depending on Origin. This permitted client and server
side cache poisoning in some circumstances (CVE-2017-7674).
When using a VirtualDirContext it was possible to bypass security
constraints and/or view the source code of JSPs for resources served
by the VirtualDirContext using a specially crafted request
(CVE-2017-12616).
Note that CVE-2017-12616 only affected tomcat 7 in Mageia 5.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | tomcat | 0 (affected), 7.0.81-1.mga5 (unaffected) | — |
| Mageia | tomcat | 0 (affected), 8.0.46-1.mga6 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.