Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-3856

Опубликовано: 26 авг. 2022
Источник: debian
EPSS Низкий

Описание

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 64%
0.01116
Низкий

Связанные уязвимости

CVSS3: 4.3
redhat
почти 5 лет назад

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

CVSS3: 4.3
nvd
около 4 лет назад

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

CVSS3: 4.3
github
около 4 лет назад

Keycloak has Files or Directories Accessible to External Parties

EPSS

Процентиль: 64%
0.01116
Низкий