| Max CVSS | 7.8 | Min CVSS | 7.8 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4836 | 7.8 |
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
|
25-03-2019 - 11:29 | 31-12-2005 - 05:00 |