CVE-2013-4444
Apache Tomcat Unrestricted file upload vulnerability
EPSS 9.5%
Description
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
How to fix CVE-2013-4444
To remediate CVE-2013-4444, upgrade the affected package to a fixed version below.
- Maven/org.apache.tomcat:tomcat—upgrade to 7.0.40 or later
Is CVE-2013-4444 being exploited?
Moderate — EPSS is 9.5%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- >= 7.0, < 7.0.40