Skip to content
OpenAdvisories

Archive

May 2007

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • High —

    Apache Tomcat allows remote attackers to read JSP source files

    The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.