Vulnerability in Joetesta Hellbent

CVE-2002-2094

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.

EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.

Affected products

Joetesta Hellbent — versions 0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

References

cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (Broken Link, Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Patch, vdb-entry, Broken Link, x_refsource_XF)