CVE-2009-2902
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
EPSS 10.8%
描述
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
如何修補 CVE-2009-2902
要修補 CVE-2009-2902,請將受影響套件升級到下列已修補版本。
- Maven/org.apache.tomcat:tomcat—升級至 5.5.29 或更新版本
CVE-2009-2902 正在被利用嗎?
中等 — EPSS 為 10.8%,可持續追蹤但非最高優先。
受影響套件(1)
- >= 5.5.0, < 5.5.29