Skip to content
OpenAdvisories

Archive

19 January 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High —

    Deserialization of Untrusted Data in Apache Tomcat

    The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name i…