Apache Tomcat CVE-2013-4444 Code Injection Vulnerability

Description

In very limited circumstances, it was possible for an attacker to upload a malicious JSP to a Tomcat server and then trigger the execution of that JSP. While Remote Code Execution would normally be viewed as a critical vulnerability, the circumstances under which this is possible are, in the view of the Tomcat security team, sufficiently limited that this vulnerability is viewed as important.

Affected Applications

Apache Tomcat

CVE References

Other References