CVE-2002-2094

2022-10-0316:23:49

mitre

www.cve.org

vulnerability

remote attackers

full path disclosure

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root’s parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.