Lucene search

K
osvGoogleOSV:GHSA-WQ8G-HM94-5RQQ
HistoryApr 23, 2022 - 12:40 a.m.

JBoss AS may expose root content if excluded-contexts list is mismatched

2022-04-2300:40:48
Google
osv.dev
10
jboss as
vulnerability
excluded-contexts

EPSS

0.002

Percentile

55.1%

JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.

EPSS

0.002

Percentile

55.1%

Related for OSV:GHSA-WQ8G-HM94-5RQQ