CVE-2007-0450
Apache Tomcat Directory Traversal
Summary
Apache Tomcat Directory Traversal
Original description
The description as published by the source.
Directory traversal vulnerability in Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) / (slash), (2) \ (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Maven
org.apache.tomcat:tomcat
[{"type":"ECOSYSTEM","events":[{"introduced":"6.0"},{"fixed":"6.0.10"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web exchange.xforce.ibmcloud.com
- web docs.info.apple.com
- web lists.apple.com
- web lists.vmware.com
- web security.gentoo.org
- web tomcat.apache.org
- web tomcat.apache.org
- web tomcat.apache.org
- web redhat.com
- web redhat.com
- web redhat.com