Improper Limitation of a Pathname to a Restricted Directory in WildFly
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10862US | medium5.5 | — | ||
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files.… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2018:2276WEB
- https://access.redhat.com/errata/RHSA-2018:2277WEB
- https://access.redhat.com/errata/RHSA-2018:2279WEB
- https://access.redhat.com/errata/RHSA-2018:2423WEB
- https://access.redhat.com/errata/RHSA-2018:2424WEB
- https://access.redhat.com/errata/RHSA-2018:2425WEB
- https://access.redhat.com/errata/RHSA-2018:2428WEB
- https://access.redhat.com/errata/RHSA-2018:2643WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan