CVE-2018-1047

2018-01-2423:29:00

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

CPENameOperatorVersion
wildflyeq7.1.0.Final-prerelease2
wildflyeq7.1.1.Final
wildflyeq7.1.2-prerelease
wildflyeq7.0.0.Alpha1-final
wildflyeq7.0.0.Final-prerelease2
wildflyeq7.0.0.Beta2
wildflyeq7.1.2.Final
wildflyeq7.1.0.Final
wildflyeq8.0.0.Alpha1
wildflyeq8.0.0.Alpha3

Name	Operator	Version
wildfly	eq	7.1.0.Final-prerelease2
wildfly	eq	7.1.1.Final
wildfly	eq	7.1.2-prerelease
wildfly	eq	7.0.0.Alpha1-final
wildfly	eq	7.0.0.Final-prerelease2
wildfly	eq	7.0.0.Beta2
wildfly	eq	7.1.2.Final
wildfly	eq	7.1.0.Final
wildfly	eq	8.0.0.Alpha1
wildfly	eq	8.0.0.Alpha3