Lucene search

K
cvelistMitreCVELIST:CVE-2021-31920
HistoryMay 27, 2021 - 4:03 a.m.

CVE-2021-31920

2021-05-2704:03:31
mitre
raw.githubusercontent.com
1

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.6%

Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.6%