Description

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.

Remediation

References

CVE-2009-2902

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1885)

ownCloud CVE-2013-0303 Vulnerability (CVE-2013-0303)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7857)

Tornado Improper Input Validation Vulnerability (CVE-2012-2374)

WordPress Plugin NextGEN Gallery-WordPress Gallery 'swfupload.swf' Cross-Site Scripting (1.9.7)

Severity

Medium

Classification

CVE-2009-2902 CWE-22

Tags

Missing Update Known Vulnerabilities