The vulnerability of the Apache Tomcat software allows a malicious attacker to compromise the confidentiality of protected information.

The vulnerability exists in the java/org/apache/catalina/servlets/DefaultServlet.java file of the standard Apache Tomcat servlet. It stems from incorrect restrictions on XSLT style sheets. This allows malicious actors to bypass security restrictions and read arbitrary files, using a specially...

Apache Tomcat Multiple Vulnerabilities (Nov 2014)

Apache Tomcat is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...