{"action":"Upgrade org.apache.tomcat:tomcat to 7.0.40 or later.","affected":[{"fixed":"7.0.40","introduced":"7.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2013-4444"],"ecosystem":"Maven","epss":0.1399,"exploited":false,"fixed_versions":["7.0.40"],"ghsa_id":"GHSA-h6c8-x5r3-pm88","id":"tcs_01M5N8ZV8233SX1219HGGNA4AA","modified_at":"2024-12-02T05:36:15.954049Z","published_at":"2022-05-13T01:12:13Z","references":["https://osv.dev/vulnerability/GHSA-h6c8-x5r3-pm88","https://nvd.nist.gov/vuln/detail/CVE-2013-4444","https://github.com/apache/tomcat","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","http://archives.neohapsis.com/archives/bugtraq/2014-09/0075.html","http://marc.info/?l=bugtraq&m=144498216801440&w=2","http://openwall.com/lists/oss-security/2014/10/24/12","http://seclists.org/fulldisclosure/2021/Jan/23","http://tomcat.apache.org/security-7.html","http://www.debian.org/security/2016/dsa-3447","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.securityfocus.com/bid/69728","http://www.securitytracker.com/id/1030834"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-h6c8-x5r3-pm88","url":"https://osv.dev/vulnerability/GHSA-h6c8-x5r3-pm88"}],"summary":"Apache Tomcat Unrestricted file upload vulnerability"}