Description

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.

Remediation

References

CVE-2013-4444

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4022)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Open Redirect (2.3.1)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.9)

Plone CMS Other Vulnerability (CVE-2012-5486)

WordPress Plugin Contus HD FLV Player 'process-sortable.php' SQL Injection (1.3)

Severity

Medium

Classification

CVE-2013-4444 CWE-94

Tags

Missing Update Known Vulnerabilities