PT-2018-10150
CVE-2018-10862
·
تاريخ النشر
2018-07-27
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
WildFly Core versions prior to 6.0.0.Alpha3
Description
The issue arises from improper validation of file paths in .war archives, allowing crafted .war archives to be extracted and overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
Recommendations
For versions prior to 6.0.0.Alpha3, update to version 6.0.0.Alpha3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾