[SECURITY] CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet

Summary

If the default servlet is write enabled (readonly initialisation parameter set to the non-default value of false) for a case insensitive file system, concurrent read and upload under load of the same file can bypass Tomcat's case sensitivity checks and cause an uploaded file to be treated as a JSP leading to remote code execution.

https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r