Timeline for Path normalization issue with semicolon in Tomcat
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 4, 2022 at 0:00 | history | tweeted | twitter.com/StackSecurity/status/1478154224743636998 | ||
| Jul 14, 2021 at 21:33 | comment | added | Christopher Schultz |
What happens if you configure nginx to serve that same directory, and you send it a URL containing a /../ path segment? Will it serve test2.html and index.html as shown in the "vulner" example? I'm asking about nginx's behavior when it's serving directly and not acting as a reverse-proxy.
|
|
| May 13, 2020 at 3:22 | comment | added | surethiv | @paj28, i sent an email to tomcat security team regarding this before posting here. But i didn't get a clear answer and as per their reply it is a normal tomcat behavior. That is why i posted here to get a community support. | |
| May 12, 2020 at 1:02 | comment | added | paj28 | Did you mean this ? | |
| May 11, 2020 at 16:43 | review | First posts | |||
| May 11, 2020 at 17:58 | |||||
| May 11, 2020 at 16:37 | history | asked | surethiv | CC BY-SA 4.0 |