Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047)

Description

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

Remediation

References

CVE-2018-1047

Related Vulnerabilities

WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.24.0)

WordPress Plugin Wholesale Market Arbitrary File Download (2.2.0)

phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-2643)

Oracle JRE CVE-2013-2418 Vulnerability (CVE-2013-2418)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)

Severity

Medium

Classification

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N