Tomcat exposes the JSP file content (I really can't think of Tomcat and this vulnerability)

xiaoxiao2021-03-06  59

The Java Server Pages (JSP) type file is registered with the '.jsp' extension on Tomcat, Tomcat is a file name sensitive, '. JSP' and '.jsp' are different types of file extensions. If you submit a link to Tomcat, Tomcat can't find '.jsp', you will respond to requests with the default '.text' file type. Because the case where the case file name in the NT system is non-sensitive, the requested file will be sent in the form of text. If in UNIX

server

The "File Not Found" error message appears. I have verified that this problem still exists on the Windows XP Pro platform and Tomcat 5.0 platform.

转载请注明原文地址:https://www.9cbs.com/read-90185.html

New Post(0)