GHSA-fmr4-w67p-vh8xMediumCVSS 5.5

Improper Input Validation in org.wildfly:wildfly-undertow

Published
October 19, 2018
Last Modified
February 13, 2023

🔗 CVE IDs covered (1)

CVE-2018-1047 →

📋 Description

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

🎯 Affected products1

  • maven/org.wildfly:wildfly-undertow:< 12.0.0

🔗 References (10)