Lucene search

K
osvGoogleOSV:GHSA-H6C8-X5R3-PM88
HistoryMay 13, 2022 - 1:12 a.m.

Apache Tomcat Unrestricted file upload vulnerability

2022-05-1301:12:13
Google
osv.dev
29

0.068 Low

EPSS

Percentile

93.9%

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.