CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. Its EPSS score suggests a 10.1% probability of exploitation in the next 30 days.
CVE
CVE-2017-7675
Severity
HIGH
CVSS
7.5
EPSS
10.14%
Apache
Original NVD Description
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
Related CVEs
Other vulnerabilities affecting the same vendor(s)