Vulnerability in Macromedia Jrun

CVE-2001-1511

JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570".

EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.

Affected products

Macromedia Jrun — versions 3.0, 3.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_XF)