CVE-2000-0024

No fix known EPSS 12%

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Published 2000-04-25 · CVE record · OSV

Products: microsoft internet_information_server, microsoft site_server, microsoft site_server_commerce