CVE-2000-0024

None

CVSS

—

EPSS

12.2%

Published

Dec 21, 1999

CISA due date

—

The record

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed