CVE-2017-12616

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.80

Description The issue allows bypassing security constraints and/or viewing the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. This is possible when using a VirtualDirContext with Apache Tomcat.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.80, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.