VULHUB ™

hellbent is a java web server maintained by Joe Testa. An issue exists in hellbent which could enable a remote user to deduce the web root. If hellbent receives a request containing '../' sequences of a relative path which exits the web root then re-enters it, hellbent will either return a 403 Forbidden or 200 OK message along with the requested object. If the 200 OK message appears, the user will have confirmed the relative path that was submitted.

hellbent is a java web server maintained by Joe Testa. An issue exists in hellbent which could enable a remote user to deduce the web root. If hellbent receives a request containing '../' sequences of a relative path which exits the web root then re-enters it, hellbent will either return a 403 Forbidden or 200 OK message along with the requested object. If the 200 OK message appears, the user will have confirmed the relative path that was submitted.