THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-24122 (MEDIUM 5.9) — When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpec

[NVD] CVE-2021-24122 (MEDIUM 5.9) — When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpec

lownvdPublished 2021-01-14

CVE-2021-24122 CVSS: 5.9 MEDIUM Published: 2021-01-14T15:15:13.400

When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath()

Indicators of compromise

CVE-2021-24122cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-24122