Description
When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Tomcat | Apache Software Foundation / Apache Tomcat | 7.0.0 to 7.0.81 | affected |
| Apache Tomcat | Apache Software Foundation / Apache Tomcat | 8.0.0.RC1 to 8.0.46 | affected |
| Apache Tomcat | Apache Software Foundation / Apache Tomcat | 8.5.0 to 8.5.22 | affected |
| Apache Tomcat | Apache Software Foundation / Apache Tomcat | 9.0.0.M1 to 9.0.0 | affected |