Description
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Remediation
References
https://access.redhat.com/errata/RHSA-2018:1247
https://access.redhat.com/errata/RHSA-2018:1248
https://access.redhat.com/errata/RHSA-2018:1249
https://access.redhat.com/errata/RHSA-2018:1251
https://access.redhat.com/errata/RHSA-2018:2938
https://bugzilla.redhat.com/show_bug.cgi?id=1528361
https://issues.jboss.org/browse/WFLY-9620
Related Vulnerabilities
CVE-2020-26259 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2020-24660 Vulnerability in npm package node-lemonldap-ng-handler
CVE-2022-25979 Vulnerability in npm package jsuites
CVE-2017-5648 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2020-8237 Vulnerability in maven package org.webjars.bower:json-bigint