How Snyk Social Trends help you fix essential security vulnerabilities
ID: 4026debd-b341-5d92-bad2-c837c2cd413a
STIX ID: report--4026debd-b341-5d92-bad2-c837c2cd413a
Feed Name: Snyk Blog
Snyk describes a social-trends feature that highlights trending vulnerabilities and uses CVE-2020-9484 — an RCE in Apache Tomcat (including embedded Spring Boot Tomcat) caused by deserializing session files via a path-traversal-controlled JSESSIONID and FileStore-backed PersistentManager — as an example; the article explains the exploit mechanics, prerequisites (PersistentManager+FileStore enabled, arbitrary file upload, a deserialization gadget on classpath), points to a public PoC, and recommends prioritizing fixes and updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.