Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7771
HistoryNov 13, 2018 - 6:27 a.m.

Directory Traversal

2018-11-1306:27:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.973 High

EPSS

Percentile

99.9%

tomcat-util is vulnerable to directory traversal attacks. The vulnerability exists due to the ability to include ../, ..\\``, and …%5C` characters in the URL, allowing directory traversal attacks.

References