CVE-2000-1050
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext
CVSS
5.0
No CVSS
EPSS
8.2%
p95
KEV
—
Exploit Today
28
0-100
Published: Dec 11, 2000 · Last modified: Sep 23, 2026
8.2%EPSS · 30 days8.2%
2026-10-012026-10-29
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
No related CVEs by CWE or product.