CVE-2021-3688 | BDVDB-2026-183276 Detail

Red Hat JBCS HTTP Server

Description#

A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1990252
https://access.redhat.com/security/cve/CVE-2021-3688

Exploit#

No public exploit known

History#

Version 12022-08-26Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.