Description

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

Remediation

References

CVE-2018-1047

Related Vulnerabilities

Roundcube Improper Privilege Management Vulnerability (CVE-2017-8114)

WordPress Plugin WordPress Mobile Pack Information Disclosure (2.1.2)

WordPress Plugin Analyticator Multiple Cross-Site Scripting Vulnerabilities (6.4.9.5)

WordPress Plugin Flog Cross-Site Scripting (0.1)

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)

Severity

Medium

Classification

CVE-2018-1047 CWE-22 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities