CVE-2015-3198

Published: Jul 21, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.redhat.com/show_bug.cgi?id=1224787

x_refsource_CONFIRM

https://stackoverflow.com/questions/30028346/with-trailing-slash-in-url-jsp-show-source-code

x_refsource_MISC

https://issues.jboss.org/browse/WFLY-4595

x_refsource_CONFIRM

https://developer.jboss.org/message/927301#927301

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-3198

Description

Affected Products

References