VulnerabilityModified
CVE-2002-1451
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
MEDIUM 5.0EPSS 8.28%
Does this matter?
Lower severity and a low EPSS score (8.28%). Track it; it rarely justifies an emergency change on its own.
Description
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 8.28% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- desiderata software/blazix
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html
- http://www.iss.net/security_center/static/9952.php
- http://www.securityfocus.com/bid/5566Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/5567
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html
- http://www.iss.net/security_center/static/9952.php
- http://www.securityfocus.com/bid/5566Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/5567
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.