GitHub Advisoryadvisory · Maven

GHSA-h6c8-x5r3-pm88 Apache Tomcat Unrestricted file upload vulnerability

MEDIUM Published 2022-05-13 Modified 2023-08-17 Official page ↗
Aliases
CVE-2013-4444
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-94
Reviewed
2023-08-17

Affected packages

• Maven org.apache.tomcat:tomcat: >= 7.0, < 7.0.40 → fixed in 7.0.40

Description

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.

Related

Alias · CVE (1)

  • CVE-2013-4444 Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References