Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-4444
6.8
MEDIUMCVSS v2
Published
September 12, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 7.0.2, = 7.0.12, = 7.0.20, = 7.0.34, = 7.0.1, = 7.0.4, = 7.0.22, = 7.0.26, = 7.0.11, = 7.0.19, = 7.0.10, = 7.0.18, = 7.0.23, = 7.0.25, = 7.0.31, = 7.0.0, = 7.0.15, = 7.0.16, = 7.0.30, = 7.0.37, = 7.0.13, = 7.0.14, = 7.0.28, = 7.0.29, = 7.0.36, = 7.0.27, = 7.0.33, = 7.0.17, = 7.0.24, = 7.0.32, <= 7.0.39, = 7.0.21, = 7.0.3, = 7.0.38, = 7.0.35NVD