Vulnerability in Apache Tomcat
CVSS score
9.8
EPSS probability
%99.3
Risk score
19.5
Published
6 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Vulhub tomcat/CVE-2020-1938: Apache Tomcat AJP Ghostcat (CVE-2020-1938), run with Isoloom
CVE-2020-1938 (Ghostcat) Tomcat AJP file read/file include PoC with python3 port
A fully refactored, Python 3 compatible exploit script for Tomcat Ghostcat (CVE-2020-1938 / CNVD-2020-10487) AJP Local File Inclusion
CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis
Apache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection capabilities
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
Apache Tomcat - AJP 'Ghostcat File Read/Inclusion
Nuclei: Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability
https://lists.apache.org/thread.html/rad36ec6a1ffc9e43266b030c22ceeea569243555d34fb4187ff08522%40%3Cnotifications.ofbiz.apache.org%3E
Similar Vulnerabilities
Improper input validation in Apache Log4j
Improper access control in N/a
struts2: RCE when performing file upload based on Jakarta Multipart parser
struts2: Using specific results and namespaces can result in a remote code execution
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
Improper authentication in Oracle Corporation Oracle Concurrent Processing
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-1938"