| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tomcat:tomcat | ≤ 3.1 | |
| tomcat | = 3.1 |
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free