Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-8114
HistoryFeb 20, 2015 - 4:59 p.m.

Design/Logic Flaw

2015-02-2016:59:00
PRIOn knowledge base
www.prio-n.com
2

8.1 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.0%

The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.

8.1 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.0%

Related for PRION:CVE-2014-8114