~ / search / GHSA-ggx9-4728-588r

GHSA-ggx9-4728-588r

Apache Tomcat Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2009-2693

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.tomcat:tomcat >= 5.5.0, < 5.5.29 5.5.29
Maven org.apache.tomcat:tomcat >= 6.0.0, < 6.0.24 6.0.24

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a `..` (dot dot) in an entry in a WAR file, as demonstrated by a `../../bin/catalina.bat` entry.

References

External links from the advisory. They lead to third-party sites.