CVE-2002-1451: Desiderata Software Blazix

Medium severity, CVSS 5.0. EPSS: 8.3% chance of exploitation in the next 30 days.

Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.

Affected products

• Desiderata Software Blazix: version 1.2 only; version 1.2.1 only

Published 2002-08-24. Last modified 2026-06-16.