CVE-2000-1050
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext
CVSS
5.0
Sem CVSS
EPSS
8.2%
p95
KEV
—
Exploit Today
28
0-100
Publicado: 11 de dez. de 2000 · Última mod.: 23 de set. de 2026
8.2%EPSS · 30 dias8.2%
2026-10-152026-11-11
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
- marc.infohttp://marc.info/?l=bugtraq&m=97236316510117&w=2
- www.allaire.comhttp://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full
- www.osvdb.orghttp://www.osvdb.org/500
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5407
Nenhum CVE relacionado por CWE ou produto.