Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
Exploitability
AV:NAC:LAu:NImpact
C:PI:NA:N5/AV:N/AC:L/Au:N/C:P/I:N/A:N