Vulnerability in Apache Tomcat that allows JSP code injection and access to web application files.
Researchers from the Chinese company Chaitin Tech have identified a vulnerability (CVE-2020-1938) in Apache Tomcat, the open-source implementation of Java Servlet, JavaServer Pages, Java Expression Language, and Java WebSocket technologies. The vulnerability has been assigned the codename Ghostcat and a critical severity level (9.8 CVSS). The problem allows, in the default configuration, access to the contents of any files in the directory by sending a request over network port 8009 […]
