Re: About CVE-2025-55752 - PUT to /WEB-INF/ or /META-INF/

Mark Thomas <[email protected]>
Newsgroups gmane.comp.jakarta.tomcat.user
Message-ID <[email protected]> 
On 24/11/2025 08:54, Harri Pesonen via users wrote:
> If we have restful application that implements PUT for JSON and XML, then are we affected by this?
> I don't understand how client could upload something to /WEB-INF/ or /META-INF/ by PUT?

Is the re-write valve enabled for that web application?

If yes, do any of the rewrite rules rewrite one or more query parameters 
to the URL?

Mark
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.