The Apache Tomcat JSP upload bypass vulnerability