GitHub Advisoryadvisory · Maven

GHSA-x445-mmpw-7r4f Apache Tomcat Allows Source Disclosure

MEDIUM Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2001-0590
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat-servlet-api
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat-servlet-api: < 3.2.2 → fixed in 3.2.2

Description

Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).

Related

Alias · CVE (1)

  • CVE-2001-0590 Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References