Security Advisory

CVE-2017-7675

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-08-11 02:00:00

Last updated 2024-09-17 03:48:21

Assigner apache

CVSS score not scored

State PUBLISHED

Description

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

← Browse all CVEs View on cve.org ↗