GHSA-4gr9-99j3-vqxvMedium

Apache Tomcat Directory Traversal

Published
April 30, 2022
Last Modified
September 18, 2023

🔗 CVE IDs covered (1)

📋 Description

Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.

🎯 Affected products1

  • maven/org.apache.tomcat:tomcat:<= 3.1

🔗 References (4)