GHSA-xjgh-84hx-56c5
Unrestricted Upload of File with Dangerous Type Apache Tomcat
At a glance
- Published
- Updated
- CVE
- CVE-2017-12617
- CVSS_V3
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
Description
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat-catalina | introduced 9.0.0.M1, fixed 9.0.1 |
| Maven · org.apache.tomcat:tomcat-catalina | introduced 8.5.0, fixed 8.5.23 |
| Maven · org.apache.tomcat:tomcat-catalina | introduced 8.0.0-RC1, fixed 8.0.47 |
| Maven · org.apache.tomcat:tomcat-catalina | introduced 7.0.0, fixed 7.0.82 |
| Maven · org.apache.tomcat.embed:tomcat-embed-core | introduced 9.0.0.M1, fixed 9.0.1 |
| Maven · org.apache.tomcat.embed:tomcat-embed-core | introduced 8.5.0, fixed 8.5.23 |
| Maven · org.apache.tomcat.embed:tomcat-embed-core | introduced 8.0.0-RC1, fixed 8.0.47 |
| Maven · org.apache.tomcat.embed:tomcat-embed-core | introduced 7.0.0, fixed 7.0.82 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-12617 ADVISORY
- https://github.com/apache/tomcat/commit/a9dd96046d7acb0357c6b7b9e6cc70d186fae663 WEB
- https://github.com/apache/tomcat/commit/74ad0e216c791454a318c1811300469eedc5c6f3 WEB
- https://github.com/apache/tomcat/commit/512a3c3aecdb52de092c6bacddd71b85c4feda06 WEB
- https://github.com/apache/tomcat/commit/506d862e7edfa991de198e0f2e4c4540830fa531 WEB
- https://github.com/apache/tomcat/commit/4cf7dab88282c8f3c92f0b961cdb0096e1d63e88 WEB
- https://github.com/apache/tomcat/commit/46dfedbc0523d7182be97f4244d7b6c942164485 WEB
- https://github.com/apache/tomcat/commit/327e8a6644e188764325a013aa2725a60f1b37e5 WEB
- https://github.com/apache/tomcat/commit/31e99502e2c602449a2f8835bd23ade772b77333 WEB
- https://github.com/apache/tomcat/commit/24aea94807f940ee44aa550378dc903289039ddd WEB
- https://github.com/apache/tomcat/commit/b577f9a7996b92b650b1649af3c3bae11c120db9 WEB
- https://github.com/apache/tomcat/commit/b7e0435d17aba69f16ae9e8a78ad0f1565b552af WEB
- https://github.com/apache/tomcat/commit/bbcbb749c75056a2781f37038d63e646fe972104 WEB
- https://github.com/apache/tomcat/commit/c177e9668d1278710bdb14c0eb8d2702b3655f5a WEB
- https://github.com/apache/tomcat/commit/cf0b37beb0622abdf24acc7110daf883f3fe4f95 WEB
- https://github.com/apache/tomcat/commit/d5b170705d24c386d76038e5989045c89795c28c WEB
- https://github.com/apache/tomcat/commit/e650cf1b83e441dbd3863f3f6b61c972cafce19e WEB
- https://github.com/apache/tomcat/commit/f1b85da754c4760787d68a99e839b50878140b57 WEB
- https://github.com/apache/tomcat/commit/fd52f8601170b91f9d7162510e54563e5bf6bdfe WEB
- https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E WEB
- https://access.redhat.com/errata/RHSA-2017:3080 WEB
- https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html WEB
- https://security.netapp.com/advisory/ntap-20171018-0002 WEB
- https://security.netapp.com/advisory/ntap-20180117-0002 WEB
- https://support.f5.com/csp/article/K53173544 WEB
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us WEB
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us WEB
- https://usn.ubuntu.com/3665-1 WEB
- https://web.archive.org/web/20171110171954/http://www.securityfocus.com/bid/100954 WEB
- https://web.archive.org/web/20201209024734/http://www.securitytracker.com/id/1039552 WEB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12617 WEB
- https://www.exploit-db.com/exploits/42966 WEB
- https://www.exploit-db.com/exploits/43008 WEB
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html WEB
- https://access.redhat.com/errata/RHSA-2017:3081 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |