VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Aug 26, 2022· Updated Jun 17, 2026

CVE-2021-3688

CVE-2021-3688

Description

A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Red Hat/Jboss Core Services Httpd11 versions
    cpe:2.3:a:redhat:jboss_core_services_httpd:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:redhat:jboss_core_services_httpd:*:*:*:*:*:*:*:*range: <2.4.37
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp2:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp3:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp4:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp5:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp6:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp7:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp8:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_core_services_httpd:2.4.37:sp9:*:*:*:*:*:*
  • Red Hat/Jboss Core Servicescpe-rescue
  • Red Hat/JBoss Core Services HTTP Serverllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.