Description
Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Adobe AEM Dispatcher <4.15 - Rules Bypass http/cves/2016/CVE-2016-0957.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.