CVE-2001-0590 Apache Tomcat Allows Source Disclosure
MediumCVSS 5.0
EPSS 11.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache tomcat | <= 3.2.2 | No fix listed |
| org.apache.tomcat/tomcat-servlet-api(Maven) | < 3.2.2 | 3.2.2 |
References
- 20010403 Re: Tomcat may reveal script source code by URL trickery exploit mailing-list vendor-advisory
- 5580 vdb-entry
- HPSBTL0112-004 vendor-advisory
- jakarta-tomcat-jsp-source(6971) vdb-entry
- nvd.nist.gov third-party-advisory vendor-advisory
- web.archive.org
- github.com