Ghostcat is a high-risk file read / include vulnerability in Tomcat 【 CVE-2020-1938 】 IntroductionJava is currently the most popular programming language in Web development, and Tomcat is one of the most popular Java middleware servers. It has been used for more than 20 years since its initial release. Ghostcat is a serious vulnerability in Tomcat discovered by security researcher of Chaitin Tech.