-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from multiple duplicate path normalization implementations that processed paths before query string removal. The commit 6b61911 removes these vulnerable custom implementations (shown in diff for ApplicationContext.java, WebdavServlet.java, and FileDirContext.java) and consolidates into RequestUtil.normalize. The removed functions lacked proper security controls for path traversal sequences when handling RequestDispatcher paths, allowing attackers to bypass access restrictions via '../' sequences before security checks.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.tomcat:tomcat | maven | >= 4.1.0, < 4.1.40 | 4.1.40 |
| org.apache.tomcat:tomcat | maven | >= 5.5.0, < 5.5.28 | 5.5.28 |
| org.apache.tomcat:tomcat | maven | >= 6.0.0, < 6.0.20 | 6.0.20 |