GitHub Advisoryadvisory · Maven

GHSA-4gr9-99j3-vqxv Apache Tomcat Directory Traversal

MEDIUM Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2000-1210
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: <= 3.1 (no fix yet)

Description

Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a `..` (dot dot) in the argument to source.jsp.

Related

Alias · CVE (1)

  • CVE-2000-1210 Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References