Skip navigation
Menu
Security

Unity eWave ServletExec Exposes Source Code

 
Unity eWave ServletExec Exposes Source Code
Reported June 6 by Niclas Vikstrom

VERSIONS EFFECTED
ServletExec 3.0

DESCRIPTION

The ServletExec software exposes source code for its files if ".JSP" is appended to the end of a generated URL.

VENDOR RESPONSE

The vendor is aware of this problem however however no response was known at the time of this writing.

CREDITS
Discovered and reported by Niclas Vikstrom
Hide comments

More information about text formats

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish
Recommended Reading
DevSecOps concept
90% of Java Services in Production Have Vulnerability Risk, DevSecOps Report Finds
Apr 20, 2024
Businesswoman challenges concept and gender obstacles
Women in Cybersecurity Face Barriers to Hiring, Advancement
Apr 15, 2024
person typing on keyboard with icons for certificates
Top IT Certifications for a Career in Finance
Apr 12, 2024
employee working on a laptop with AI
Why AI Coding Assistants May Be Greatest Cybersecurity Threat Facing Your Business
Mar 26, 2024