https://bz.apache.org/bugzilla/show_bug.cgi?id=69717

--- Comment #1 from Remy Maucherat <r...@apache.org> ---
Please read: "Moderate: Security constraint bypass for PreResources and
PostResources CVE-2025-49125" https://tomcat.apache.org/security-9.html

Stripping the trailing / in AbstractResourceSet.setWebAppMount seems possible.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to