Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.01583
Percentile: 0.80799

CVSS Scoring

Affected Products

• cpe:2.3:a:w3c:jigsaw:2.2.1:*:*:*:*:*:*:*

← Back to Home