CVE-2013-4444: Code Injection
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4444?
CVE-2013-4444 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2013-4444?
To mitigate CVE-2013-4444, upgrade Apache Tomcat to version 7.0.40 or later.
What does CVE-2013-4444 affect?
CVE-2013-4444 affects Apache Tomcat versions 7.x prior to 7.0.40, specifically those using an outdated java.io.File code and a custom JMX configuration.
What are the risks of CVE-2013-4444?
Exploitation of CVE-2013-4444 allows remote attackers to upload and execute arbitrary JSP files, potentially compromising the server.
Is CVE-2013-4444 relevant for all Tomcat users?
CVE-2013-4444 is particularly relevant for users of older versions of Apache Tomcat 7.x who utilize custom JMX configurations.