GHSA-wq8g-hm94-5rqqHighCVSS 7.5

JBoss AS may expose root content if excluded-contexts list is mismatched

Published
April 23, 2022
Last Modified
February 2, 2023

🔗 CVE IDs covered (1)

CVE-2012-1094 →

📋 Description

JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.

🎯 Affected products1

  • maven/org.jboss.as:jboss-as-server:>= 7.0.0.Alpha1, < 7.1.1.Final

🔗 References (4)