Lucene search

K
cvelistApacheCVELIST:CVE-2017-7675
HistoryAug 10, 2017 - 12:00 a.m.

CVE-2017-7675

2017-08-1000:00:00
apache
raw.githubusercontent.com
2

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.6%

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.6%