CVE-2002-0300 affects gnujsp versions 1.0.0 and 1.0.1, allowing remote attackers to bypass access restrictions. The vulnerability stems from the gnujsp servlet failing to properly process requested files, leading to directory listings and source code disclosure. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), this medium-severity flaw is easily exploitable over the network with low complexity, potentially leading to information disclosure. While not on the KEV catalog and lacking Metasploit/Nuclei modules, an ExploitDB entry (EDB-21295) confirms the existence of public exploit code, though community discussion and media coverage remain minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.0CPE matchmatch criteria | cpe:2.3:a:gnujsp:gnujsp:1.0.0:*:*:*:*:*:*:* | ||
1.0.1CPE matchmatch criteria | cpe:2.3:a:gnujsp:gnujsp:1.0.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.