GitHub Advisoryadvisory · Maven

GHSA-qg4g-6jcq-rw93 Jakarta Apache Tomcat Reveals Physical Paths

MEDIUM Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2000-0759
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: <= 3.1 (no fix yet)

Description

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Related

Alias · CVE (1)

  • CVE-2000-0759 Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References