Unscored CVE-2004-0280 EUVD-2004-0280GHSA-f9hp-fgg5-7659

Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded …

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.

References

resin-source-disclosure(15085) vdb-entry
9614 vdb-entry
20040205 Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/") mailing-list