CVE-2018-11798

mediumpriority · track · 28EPSS 0.047 · 92 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

4.71% (92nd) EPSS

CVSS 4 · medium

Is it mine?

6 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04mediumAV:N/AC:L/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV

v3.06mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-538USprimaryCWE-22USCWE-284USCWE-538USCWE-538US

affected products (6)

Products and version ranges known to be affected.

Apache Software Foundation Apache Thrift≤ Apache Thrift 0.9.2 to 0.11.0enisa_euvdEU
Apache Software Foundation Thrift0.9.2 → 0.12.0fstec_bduRU
Oracle Corp. NoSQL Database≤ 19.3.12fstec_bduRU
Red Hat Inc. Red Hat JBoss Fuse≤ 7fstec_bduRU
apache thrift0.9.2 → 0.11.0nvdUScpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*
Maven org.apache.thrift:libthrift0.9.2 → 0.12.0osvUSpkg:maven/org.apache.thrift/libthrift

advisories (1)

Vendor and ecosystem advisories describing this.

GHSA-vx85-mj8c-4qm6Apache Thrift Node.js static web server sandbox escape2019-01-17ghsa · osvUS
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd osv NVD CVE.org MITRE

published 2019-01-07modified 2026-06-17

related (130)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2019-15793US	high8.8OT high	0.69% (52nd)	Exploit	2020-04-24
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing…
CVE-2006-5316US	high7.8	2.81% (86th)	Exploit	2006-10-17
registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios…
CVE-2019-6851US	high7.5	29.1% (98th)	—	2019-10-29
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause…
CVE-2025-11079US	critical9.8	0.91% (60th)	—	2025-09-27
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory in…
CVE-2024-22433US	critical9.8	0.64% (51st)	—	2024-02-06
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauth…

+125 more

references (21)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan