VDB
Sign up
MEDIUM

GHSA-4prh-gqw8-rgh5

Apache Tomcat Directory Traversal

Quick fix

GHSA-4prh-gqw8-rgh5 — org.apache.tomcat:tomcat: upgrade to the fixed version with the command below.

# pom.xml: bump <version>5.5.22</version> for org.apache.tomcat:tomcat

Details

Directory traversal vulnerability in Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a `..` (dot dot) sequence with combinations of (1) `/` (slash), (2) `\` (backslash), and (3) URL-encoded backslash (`%5C`) characters in the URL, which are valid separators in Tomcat but not in Apache.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.apache.tomcat:tomcat
Introduced in: 5.0Fixed in: 5.5.22
Fix# pom.xml: bump <version>5.5.22</version> for org.apache.tomcat:tomcat
Maven/org.apache.tomcat:tomcat
Introduced in: 6.0Fixed in: 6.0.10
Fix# pom.xml: bump <version>6.0.10</version> for org.apache.tomcat:tomcat

References