Description
When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
Remediation
References
Related Vulnerabilities
Microsoft SQL Server CVE-2023-32025 Vulnerability (CVE-2023-32025)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2156)
WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)
Contao Insufficient Session Expiration Vulnerability (CVE-2024-30262)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37147)