Düşük
CVE-2013-4444: Tomcat: kod enjeksiyonu
Açıklama (NVD)
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
Özet bilgiler
- Ürün
- Apache Tomcat
- EPSS
- %13,99 (yüzdelik 97)
- CWE
- CWE-94
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apache-tomcat | — | 7.0.39 | — |
| apache-tomcat | 7.0.0 | 7.0.0 | — |
| apache-tomcat | 7.0.0 | 7.0.0 | — |
| apache-tomcat | 7.0.1 | 7.0.1 | — |
| apache-tomcat | 7.0.2 | 7.0.2 | — |
| apache-tomcat | 7.0.2 | 7.0.2 | — |
| apache-tomcat | 7.0.3 | 7.0.3 | — |
| apache-tomcat | 7.0.4 | 7.0.4 | — |
| apache-tomcat | 7.0.4 | 7.0.4 | — |
| apache-tomcat | 7.0.10 | 7.0.10 | — |
| apache-tomcat | 7.0.11 | 7.0.11 | — |
| apache-tomcat | 7.0.12 | 7.0.12 | — |
| apache-tomcat | 7.0.13 | 7.0.13 | — |
| apache-tomcat | 7.0.14 | 7.0.14 | — |
| apache-tomcat | 7.0.15 | 7.0.15 | — |
| apache-tomcat | 7.0.16 | 7.0.16 | — |
| apache-tomcat | 7.0.17 | 7.0.17 | — |
| apache-tomcat | 7.0.18 | 7.0.18 | — |
| apache-tomcat | 7.0.19 | 7.0.19 | — |
| apache-tomcat | 7.0.20 | 7.0.20 | — |
| apache-tomcat | 7.0.21 | 7.0.21 | — |
| apache-tomcat | 7.0.22 | 7.0.22 | — |
| apache-tomcat | 7.0.23 | 7.0.23 | — |
| apache-tomcat | 7.0.24 | 7.0.24 | — |
| apache-tomcat | 7.0.25 | 7.0.25 | — |
| apache-tomcat | 7.0.26 | 7.0.26 | — |
| apache-tomcat | 7.0.27 | 7.0.27 | — |
| apache-tomcat | 7.0.28 | 7.0.28 | — |
| apache-tomcat | 7.0.29 | 7.0.29 | — |
| apache-tomcat | 7.0.30 | 7.0.30 | — |
Kaynaklar
- NVD kaydı
- archives.neohapsis.com
- marc.info
- openwall.com
- seclists.org
- tomcat.apache.org
- www.debian.org
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- h20564.www2.hpe.com
- archives.neohapsis.com
- marc.info
- openwall.com
- seclists.org
- tomcat.apache.org
- www.debian.org
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- h20564.www2.hpe.com
- CWE-94