Apache Tomcat Reveals Path through Long URL

MEDIO 5.0CVE-2001-0917 · GHSA-2w2w-cv3h-rr38 · Published 22/11/2001 · updated 16/06/2026

In breve

CVE-2001-0917 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda org.apache.tomcat:tomcat, tomcat (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 7.8%, superiore al 94.7% delle vulnerabilità.
Correzione: aggiornare a 4.0.2 o successiva.

Package	Affected versions	Patched versions
org.apache.tomcat:tomcat Maven	`< 4.0.2`	`4.0.2`
tomcat apache	`= 4.0.1`	No fix yet

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

NVD description

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.