CVE-2018-1047

2018-01-2423:00:00

CWE-20

redhat

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

CNA Affected

[
  {
    "product": "Wildfly",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "9.x"
      }
    ]
  }
]