CVE-2013-4590 vulnerability with Tomcat 7.0.42 shipped with Crowd 2.7.2

Crowd 2.7.2 is shipped with Tomcat 7.0.42, which is susceptible to CVE-2013-4590

Workaround

Deploy Crowd WAR instead, with Tomcat 7.0.50 or above. Instructions here: https://confluence.atlassian.com/display/CROWD/Installing+Crowd+WAR+Distribution