VULNERABILITY INTELLIGENCE

CVE-2006-0819

CVSS score7.8 HIGH
EPSS probability2.27%
CISA KEVNot currently listed
Published2006-03-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

Primary references