Description
When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
Remediation
References
Related Vulnerabilities
MODX Improper Certificate Validation Vulnerability (CVE-2017-7322)
Moodle Credentials Management Errors Vulnerability (CVE-2012-0794)
WordPress Plugin Formidable-Clockwork SMS Cross-Site Scripting (1.0.3)
WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.29)
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (4.7.4)