tag

Draining-Valve

Apache Tomcat LoadBalancerDrainingValve — Cross-System Open Redirect / Session Fixation (CVE-2026-25854)

CVE-2026-25854· Apache Tomcat (clustered, using LoadBalancerDrainingValve) patched