Apache Tomcat CVE-2017-12617 Denial of Service Vulnerability

description-logoDescription

When running with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

affected-products-logoAffected Applications

Apache Tomcat

CVE References

CVE-2017-12617