CVE:CVE-2017-12617
CNNVD:CNNVD-201709-1092
Apache Tomcat是美国阿帕奇（Apache）软件基金会下属的Jakarta项目的一款轻量级Web应用服务器，它主要用于开发和调试JSP程序，适用于中小型系统。
Apache Tomcat中存在安全漏洞。攻击者可通过发送特制的请求利用该漏洞向服务器上传JSP文件，并执行文件中包含的代码。以下版本受到影响：Apache Tomcat 9.0.0.M1版本至9.0.0版本，8.5.0版本至8.5.22版本，8.0.0.RC1版本至8.0.46版本，7.0.0版本至7.0.81版本。
solution:Upgrade apache tomcat to a higher version than 7.0.0,7.0.1,7.0.2,7.0.2:beta,7.0.3,7.0.4,7.0.4:beta,7.0.5,7.0.5:beta,7.0.6,7.0.7,7.0.8,7.0.9,7.0.10,7.0.11,7.0.12,7.0.13,7.0.14,7.0.15,7.0.16,7.0.17,7.0.18,7.0.19,7.0.20,7.0.21,7.0.22,7.0.23,7.0.24,7.0.25,7.0.26,7.0.27,7.0.28,7.0.29,7.0.30,7.0.31,7.0.32,7.0.33,7.0.34,7.0.35,7.0.36,7.0.37,7.0.38,7.0.39,7.0.40,7.0.41,7.0.42,7.0.43,7.0.44,7.0.45,7.0.46,7.0.47,7.0.48,7.0.49,7.0.50,7.0.51,7.0.54,7.0.55,7.0.56,7.0.57,7.0.58,7.0.59,7.0.60,7.0.61,7.0.62,7.0.63,7.0.64,7.0.65,7.0.66,7.0.67,7.0.68,7.0.69,7.0.70,7.0.71,7.0.72,7.0.73,7.0.74,7.0.75,7.0.76,7.0.77,7.0.79,7.0.80,7.0.81,8.0.0:rc1,8.0.0:rc10,8.0.0:rc2,8.0.0:rc5,8.0.1,8.0.2,8.0.4,8.0.6,8.0.7,8.0.9,8.0.10,8.0.11,8.0.12,8.0.13,8.0.14,8.0.15,8.0.16,8.0.17,8.0.18,8.0.19,8.0.20,8.0.21,8.0.22,8.0.23,8.0.24,8.0.25,8.0.26,8.0.27,8.0.28,8.0.29,8.0.30,8.0.31,8.0.32,8.0.33,8.0.34,8.0.35,8.0.36,8.0.37,8.0.38,8.0.39,8.0.40,8.0.41,8.0.42,8.0.43,8.0.44,8.0.45,8.0.46,8.5.0,8.5.1,8.5.2,8.5.3,8.5.4,8.5.5,8.5.6,8.5.7,8.5.8,8.5.9,8.5.10,8.5.11,8.5.12,8.5.13,8.5.14,8.5.15,8.5.16,8.5.17,8.5.18,8.5.19,8.5.20,8.5.21,8.5.22,9.0.0,9.0.0:m1,9.0.0:m10,9.0.0:m11,9.0.0:m12,9.0.0:m13,9.0.0:m14,9.0.0:m15,9.0.0:m16,9.0.0:m17,9.0.0:m18,9.0.0:m19,9.0.0:m2,9.0.0:m20,9.0.0:m21,9.0.0:m22,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9,and avoid the version 7.0.0,7.0.1,7.0.2,7.0.2:beta,7.0.3,7.0.4,7.0.4:beta,7.0.5,7.0.5:beta,7.0.6,7.0.7,7.0.8,7.0.9,7.0.10,7.0.11,7.0.12,7.0.13,7.0.14,7.0.15,7.0.16,7.0.17,7.0.18,7.0.19,7.0.20,7.0.21,7.0.22,7.0.23,7.0.24,7.0.25,7.0.26,7.0.27,7.0.28,7.0.29,7.0.30,7.0.31,7.0.32,7.0.33,7.0.34,7.0.35,7.0.36,7.0.37,7.0.38,7.0.39,7.0.40,7.0.41,7.0.42,7.0.43,7.0.44,7.0.45,7.0.46,7.0.47,7.0.48,7.0.49,7.0.50,7.0.51,7.0.54,7.0.55,7.0.56,7.0.57,7.0.58,7.0.59,7.0.60,7.0.61,7.0.62,7.0.63,7.0.64,7.0.65,7.0.66,7.0.67,7.0.68,7.0.69,7.0.70,7.0.71,7.0.72,7.0.73,7.0.74,7.0.75,7.0.76,7.0.77,7.0.79,7.0.80,7.0.81,8.0.0:rc1,8.0.0:rc10,8.0.0:rc2,8.0.0:rc5,8.0.1,8.0.2,8.0.4,8.0.6,8.0.7,8.0.9,8.0.10,8.0.11,8.0.12,8.0.13,8.0.14,8.0.15,8.0.16,8.0.17,8.0.18,8.0.19,8.0.20,8.0.21,8.0.22,8.0.23,8.0.24,8.0.25,8.0.26,8.0.27,8.0.28,8.0.29,8.0.30,8.0.31,8.0.32,8.0.33,8.0.34,8.0.35,8.0.36,8.0.37,8.0.38,8.0.39,8.0.40,8.0.41,8.0.42,8.0.43,8.0.44,8.0.45,8.0.46,8.5.0,8.5.1,8.5.2,8.5.3,8.5.4,8.5.5,8.5.6,8.5.7,8.5.8,8.5.9,8.5.10,8.5.11,8.5.12,8.5.13,8.5.14,8.5.15,8.5.16,8.5.17,8.5.18,8.5.19,8.5.20,8.5.21,8.5.22,9.0.0,9.0.0:m1,9.0.0:m10,9.0.0:m11,9.0.0:m12,9.0.0:m13,9.0.0:m14,9.0.0:m15,9.0.0:m16,9.0.0:m17,9.0.0:m18,9.0.0:m19,9.0.0:m2,9.0.0:m20,9.0.0:m21,9.0.0:m22,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9