Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS1xZzRnLTZqY3Etcnc5M81Z2w

Jakarta Apache Tomcat Reveals Physical Paths

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Permalink: https://github.com/advisories/GHSA-qg4g-6jcq-rw93
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZzRnLTZqY3Etcnc5M81Z2w
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 8 months ago


Identifiers: GHSA-qg4g-6jcq-rw93, CVE-2000-0759
References: Blast Radius: 0.0

Affected Packages

maven:org.apache.tomcat:tomcat
Dependent packages: 30
Dependent repositories: 438
Downloads:
Affected Version Ranges: <= 3.1
No known fixed version
All affected versions: