Apache Tomcat Reveals Path through Long URL

MEDIO 5.0CVE-2001-0917 · GHSA-2w2w-cv3h-rr38 · Published 22/11/2001 · updated 16/06/2026

En resumen

CVE-2001-0917 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a org.apache.tomcat:tomcat, tomcat (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 7.8%, mayor que el 94.7% de las vulnerabilidades.
Solución: actualizar a 4.0.2 o posterior.

Package	Affected versions	Patched versions
org.apache.tomcat:tomcat Maven	`< 4.0.2`	`4.0.2`
tomcat apache	`= 4.0.1`	No fix yet

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

NVD description

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.