CVE-2015-5345
The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects b
CVSS
5.3
Média
EPSS
18.4%
p97
KEV
—
Exploit Today
29
0-100
Publicado: 25 de fev. de 2016 · Última mod.: 14 de out. de 2026 · CWE-22
18.4%EPSS · 30 dias18.4%
2026-10-142026-11-11
The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html
- marc.infohttp://marc.info/?l=bugtraq&m=145974991225029&w=2
- packetstormsecurity.comhttp://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-1089.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-2045.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-2599.html
- seclists.orghttp://seclists.org/bugtraq/2016/Feb/146
- seclists.orghttp://seclists.org/fulldisclosure/2016/Feb/122
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1715206
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1715207
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1715213
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1715216
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1716882
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1716894
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1717209
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1717212
- svn.apache.orghttp://svn.apache.org/viewvc?view=revision&revision=1717216
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-685493.3 BAI—
———ClickMigrate is a database migration tool for ClickHouse with automatic SQL migration management and version tracking. Prior to version 1.0.3, a path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory. Under specific conditions, an attacker could cause the tool to create a .sql file in an arbitrary location writable by the user executing the command. This issue is only exploitable if an attacker can influence the migration name passed to the revision command, such as through an insecure automation or CI/CD pipeline that forwards untrusted input. This issue has been patched in version 1.0.3.7hCVE-2026-674499.8 CRÍ—
———Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler (app/api/tus/hooks/route.ts) allowed an unauthenticated attacker to overwrite arbitrary files under the private data directory, including /data/private/keys/master_key.bin (the AES-256-GCM master key). This issue has been patched in version 1.21.2.8hCVE-2026-659505.8 MÉD—
———A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted ZIP-based update package.8hCVE-2026-1262357.2 ALT—
———A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.2 through 7.6.7, FortiAnalyzer 7.4.7 through 7.4.11, FortiAnalyzer 7.2.10 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.2 through 7.6.7, FortiManager 7.4.7 through 7.4.11, FortiManager 7.2.10 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to write arbitrary files via a specially crafted archive.8hCVE-2026-1262227.2 ALT—
———A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.3 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.3 through 7.6.7, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.3 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.3 through 7.6.7 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests.8hCVE-2026-1262197.2 ALT—
———A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.8h