Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-4836)

Description

The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.

Remediation

References

CVE-2005-4836

Related Vulnerabilities

WordPress Plugin wp-mpdf Cross-Site Request Forgery (3.5.1)

MySQL CVE-2020-2892 Vulnerability (CVE-2020-2892)

Dotclear Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-1613)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.0.15)

WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)

Severity

High

Classification

CVE-2005-4836 CWE-200