Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat RequestDispatcher 信息泄露漏洞
Vulnerability Description
Apache Tomcat是一个流行的开放源码的JSP应用服务器。 在使用RequestDispatcher时，删除查询字符串之前会规则化目标路径，这导致远程攻击者可以通过向Apache Tomcat服务器提交包包含..查询请求，使得其可以读取系统上的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A