CVE-2001-1513

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-12-31 · updated 2026-06-16

Description

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx.

Affected products

Macromedia Jrun: 3.0, 3.1

References

http://www.iss.net/security_center/static/7680.php
http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full
http://www.securityfocus.com/bid/3600
http://www.iss.net/security_center/static/7680.php
http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full
http://www.securityfocus.com/bid/3600

Get alerted when CVE-2001-1513 or the next vulnerability affects your stack