| Package | Affected versions | Patched versions |
|---|---|---|
| servletexec isapi | = 4.1 |
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free