CVE-2017-7675

HIGH7.5EPSS 3.7%

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

發布日:2022/5/14修改日:2024/3/16
也稱為:GHSA-68g5-8q7f-m384

描述

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(33)