CVE-2004-0281
MEDIUM 5.0EPSS 4.2%
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 4.20% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2004-03-18
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://www.securityfocus.com/bid/9617
- http://marc.info/?l=bugtraq&m=107635084830547&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15087