Apache Tomcat Reveals Path through Long URL

MÉDIO 5.0CVE-2001-0917 · GHSA-2w2w-cv3h-rr38 · Published 22/11/2001 · updated 16/06/2026

Em resumo

CVE-2001-0917 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta org.apache.tomcat:tomcat, tomcat (apache).
Chance de exploração nos próximos 30 dias (EPSS): 7.8%, maior que 94.7% das vulnerabilidades.
Correção: atualize para 4.0.2 ou posterior.

Package	Affected versions	Patched versions
org.apache.tomcat:tomcat Maven	`< 4.0.2`	`4.0.2`
tomcat apache	`= 4.0.1`	No fix yet

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

NVD description

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.