CVE-2021-43762CWE-20

Adobe Experience Manager Unicode normalization leads to dispatcher bypass

Medium · published January 13, 2022

CVSS v3.1
6.5
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01631 · 76.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-01-13T20:27Z
EPSS history
Timeline
  • 13 JAN 20:27Z
    Adobe Experience Manager Unicode normalization leads to dispatcher bypass
    cvelistv5