Medium CVE-2000-1210 EUVD-2022-1620GHSA-4gr9-99j3-vqxv

Apache Tomcat Directory Traversal

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Package: org.apache.tomcat:tomcat Ecosystem: Maven

Description

Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.tomcat:tomcat	<= 3.1	—	GHSA-4gr9-99j3-vqxv

References

apache-tomcat-file-contents(4205) vdb-entry
20000322 Security bug in Apache project: Jakarta Tomcat mailing-list