DeutschShown in its original language — a full translation is planned for a future version.
Apache Ant: Schwachstelle ermöglicht Manipulation von Daten
view advisory published 2026-09-06
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Ant ausnutzen, um Daten zu manipulieren.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-78254US | — | — | ||
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target di… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:88150 vom 2026-10-22external
- Amazon Linux Security Advisory ALAS2-2026-4020 vom 2026-10-25external
- Apache Ant Security Reports vom 2026-09-06external
- openSUSE Security Update OPENSUSE-SU-2026:21891-1 vom 2026-09-24external
- OSS Security Mailing List vom 2026-09-06external
- WID-SEC-W-2026-3201 - CSAF Versionself
- WID-SEC-2026-3201 - Portal Versionself
- IBM Security Bulletin 7292240 vom 2026-10-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan