CVE-2006-3835

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by…

published July 25, 2006

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.46207 · 98.8th percentile
Published
2006-07-25T00:00Z
EPSS history
Timeline
  • 25 JUL 00:00Z
    Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by…
    cvelistv5