Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-43762 EUVD-2021-30669GHSA-qr5v-fwp7-vh85

Adobe Experience Manager Unicode normalization leads to dispatcher bypass

Published Jan 13, 2022 · Updated Sep 17, 2024 · Assigned by adobe

Description

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

Affected products

VendorProductAffectedFixed
Adobe Experience Manager unspecified – ≤ 6.5.10.0, unspecified – ≤ None —

References