CVE-2001-0590

Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

10.96% chance of exploitation in the next 30 days, 96th percentile

Published

2002-03-09

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20716

References

• CVE Record
• NVD entry

Related

• CVE-2001-0584
• CVE-2001-0593
• CVE-2001-0581
• CVE-2001-0594
• CVE-2001-0580
• CVE-2001-0595