CVE-2001-1545: Macromedia Jrun

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

Affected products

• Macromedia Jrun: version 3.0 only; version 3.1 only

Published 2001-12-31. Last modified 2026-06-16.