CVE-2003-0411
High · 7.5CVSS
7.5
EPSS
25.1%
Published
Jun 30, 2003
CISA due date
—
The record
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-55170 OpenFGA is an authorization/permission engine built for developers. CWE-178
- CVE-2026-57234 Nokogiri is an open source XML and HTML library for the Ruby programming language. CWE-178
- CVE-2026-45135 Caddy is an extensible server platform that uses TLS by default. CWE-178
- CVE-2026-48794 Authelia is an open-source authentication and authorization server providing two-factor… CWE-178
- CVE-2026-47203 Authelia is an open-source authentication and authorization server providing two-factor… CWE-178
- CVE-2026-49336 @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API… CWE-178
- GHSA-j99q-93c9-h869 MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing… CWE-178
- GHSA-mm7m-92g8-7m47 Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and… CWE-178