GitHub Advisoryadvisory · Maven

GHSA-6qr6-x7jm-x2q6 Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

MEDIUM Published 2022-05-14 Modified 2025-08-28 Official page ↗
Aliases
CVE-2015-5174
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-22
Reviewed
2022-07-06

Affected packages

• Maven org.apache.tomcat:tomcat: >= 8.0.0-RC1, < 8.0.27 → fixed in 8.0.27 • Maven org.apache.tomcat:tomcat: >= 7.0.0, < 7.0.65 → fixed in 7.0.65 • Maven org.apache.tomcat:tomcat: >= 6.0.0, < 6.0.45 → fixed in 6.0.45

Description

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.

Related

Alias · CVE (1)

  • CVE-2015-5174 Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References