Description
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
Remediation
References
Related Vulnerabilities
WordPress Plugin SearchAutocomplete 'tags.php' SQL Injection (1.0.8)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.8)
WordPress Plugin Unlimited PopUps SQL Injection (4.5.3)
Oracle JRE CVE-2017-10388 Vulnerability (CVE-2017-10388)
OpenSSL Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-34183)