Improper Limitation of a Pathname to a Restricted Directory in WildFly
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-10862US | medium5.5 | — | ||
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2018:2276WEB
- https://access.redhat.com/errata/RHSA-2018:2277WEB
- https://access.redhat.com/errata/RHSA-2018:2279WEB
- https://access.redhat.com/errata/RHSA-2018:2423WEB
- https://access.redhat.com/errata/RHSA-2018:2424WEB
- https://access.redhat.com/errata/RHSA-2018:2425WEB
- https://access.redhat.com/errata/RHSA-2018:2428WEB
- https://access.redhat.com/errata/RHSA-2018:2643WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan