Lucene search
+L

5 matches found

OSV
OSV
•added 2022/04/29 1:25 a.m.•40 views

GHSA-QFW2-WVRW-MVW4 Jakarta Tomcat Directory Listing vulnerability

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...

5CVSS6.4AI score0.46035EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
•added 2022/04/29 1:25 a.m.•44 views

Jakarta Tomcat Directory Listing vulnerability

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...

5CVSS7AI score0.46035EPSS
SaveExploits1References12Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•35 views

Apache Tomcat 3.x Null Byte Directory/File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6721/info Apache Tomcat is prone to a directory/file disclosure vulnerability when used with JDK 1.3.1 or earlier. It has been reported that remote attackers may view directory contents even when an 'index.html' or other...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/01/29 12:00 a.m.•5 views

CVE-2003-0042: Undefined Security Weakness

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...

5CVSS5.8AI score0.46035EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 2003/01/26 12:00 a.m.•65 views

Apache Tomcat 3.x - Null Byte Directory / File Disclosure

source: https://www.securityfocus.com/bid/6721/info Apache Tomcat is prone to a directory/file disclosure vulnerability when used with JDK 1.3.1 or earlier. It has been reported that remote attackers may view directory contents even when an 'index.html' or other welcome file. It is also possible...

5CVSS5.8AI score0.46035EPSS
SaveExploits1
Rows per page
Query Builder