A vulnerability was discovered in Tomcat where if a servlet context was configured with readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and achieve code execution.
Last updated 25 August 2025
apachemodphp. Multiple issues were addressed by updating to PHP version 7.3.11.