Логотип exploitDog
bind:CVE-2008-2370
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2008-2370

Количество 6

Количество 6

ubuntu логотип

CVE-2008-2370

около 17 лет назад

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

CVSS2: 5
EPSS: Высокий
redhat логотип

CVE-2008-2370

около 17 лет назад

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

EPSS: Высокий
nvd логотип

CVE-2008-2370

около 17 лет назад

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

CVSS2: 5
EPSS: Высокий
debian логотип

CVE-2008-2370

около 17 лет назад

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 th ...

CVSS2: 5
EPSS: Высокий
github логотип

GHSA-m8h8-6rvg-f4mg

больше 3 лет назад

Apache Tomcat Path Traversal Vulnerability

EPSS: Высокий
oracle-oval логотип

ELSA-2008-0648

почти 17 лет назад

ELSA-2008-0648: tomcat security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2008-2370

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

CVSS2: 5
89%
Высокий
около 17 лет назад
redhat логотип
CVE-2008-2370

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

89%
Высокий
около 17 лет назад
nvd логотип
CVE-2008-2370

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

CVSS2: 5
89%
Высокий
около 17 лет назад
debian логотип
CVE-2008-2370

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 th ...

CVSS2: 5
89%
Высокий
около 17 лет назад
github логотип
GHSA-m8h8-6rvg-f4mg

Apache Tomcat Path Traversal Vulnerability

89%
Высокий
больше 3 лет назад
oracle-oval логотип
ELSA-2008-0648

ELSA-2008-0648: tomcat security update (IMPORTANT)

почти 17 лет назад

Уязвимостей на страницу