GitStock

apache/tomcat · Security

Unrestricted Upload of File with Dangerous Type Apache Tomcat

GHSA ID
GHSA-xjgh-84hx-56c5
CVE ID
CVE-2017-12617
Severity
high
Published
Updated
CVSS
8.1 · CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
CVSS v3
8.1 · CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H

Description

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CWEs

  • CWE-434 · Unrestricted Upload of File with Dangerous Type

References

Open GitHub