GHSA-ggx9-4728-588r

Suggest an improvement
Source
https://github.com/advisories/GHSA-ggx9-4728-588r
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-ggx9-4728-588r/GHSA-ggx9-4728-588r.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-ggx9-4728-588r
Aliases
  • CVE-2009-2693
Published
2022-05-02T03:37:48Z
Modified
2024-02-21T16:44:38Z
Summary
Apache Tomcat Directory Traversal vulnerability
Details

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

References

Affected packages

Maven / org.apache.tomcat:tomcat

Package

Name
org.apache.tomcat:tomcat
View open source insights on deps.dev
Purl
pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.5.29

Database specific

{
    "last_known_affected_version_range": "<= 5.5.28"
}

Maven / org.apache.tomcat:tomcat

Package

Name
org.apache.tomcat:tomcat
View open source insights on deps.dev
Purl
pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.0.24