Page 3 of 22 results (0.004 seconds)

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0

22 Mar 2002 — Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp. • http://marc.info/?l=bugtraq&m=95371672300045&w=2 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2

02 Aug 2001 — Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0). • https://www.exploit-db.com/exploits/20716 •