Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-3856

Опубликовано: 26 авг. 2022
Источник: debian
EPSS Низкий

Описание

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 58%
0.00364
Низкий

Связанные уязвимости

CVSS3: 4.3
redhat
больше 4 лет назад

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

CVSS3: 4.3
nvd
больше 3 лет назад

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

CVSS3: 4.3
github
больше 3 лет назад

Keycloak has Files or Directories Accessible to External Parties

EPSS

Процентиль: 58%
0.00364
Низкий