Описание
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| tomcat4 | no-dsa | sarge | package |
EPSS
Процентиль: 75%
0.00917
Низкий
Связанные уязвимости
ubuntu
около 20 лет назад
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
nvd
около 20 лет назад
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
github
почти 4 года назад
Apache Tomcat allows remote attackers to read JSP source files
EPSS
Процентиль: 75%
0.00917
Низкий