Disclosure of JSP source code

Under a particular configuration, ServletExec AS v3.0C will disclose
the source code of JSP pages when some special characters are
appended to HTTP requests. Net-security.org reports.