CVE-2001-1511: Macromedia Jrun

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570".

Affected products

• Macromedia Jrun: version 3.0 only; version 3.1 only

Published 2001-12-31. Last modified 2026-06-16.