CVE-2000-1050
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext
CVSS
5.0
Sin CVSS
EPSS
8.2%
p95
KEV
—
Exploit Today
28
0-100
Publicado: 11 dic 2000 · Última mod.: 23 sept 2026
8.2%EPSS · 30 días8.2%
2026-10-012026-10-29
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
Sin CVEs relacionados por CWE o producto.