Description

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.

Remediation

References

CVE-2009-2902

Related Vulnerabilities

WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2023-22622)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23177)

WordPress Plugin TagNinja 'id' Parameter Cross-Site Scripting (1.0)

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (5.1.0)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)

Severity

Medium

Classification

CVE-2009-2902 CWE-22

Tags

Missing Update Known Vulnerabilities