CVE-2000-1224: Caucho Technology Resin

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.

Affected products

• Caucho Technology Resin: version 1.1.5 only; version 1.2 only

Published 2000-11-23. Last modified 2026-06-16.