CVE-2021-3856CWE-552

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader

published August 26, 2022

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01158 · 66.8th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2022-08-26T15:25Z
EPSS history
Timeline
  • 26 AUG 15:25Z
    ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader
    cvelistv5