Lucene search
Veracode Vulnerability DatabaseVERACODE:6571HistoryJun 06, 2018 - 2:54 a.m.
Arbitrary File Write
2018-06-0602:54:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0005 Low
EPSS
Percentile
18.1%
Apache Storm is vulnerable to arbitrary file writes. The vulnerability exists due to the lack of sanitization of the filename, allowing path-traversal filenames to exist and write to arbitrary file locations during the unzipping process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| storm core | le | 1.2.1 | |
| storm core | le | 1.0.6 | |
| storm core | le | 1.1.2 |
Related
cve
cve
CVE-2018-8008
2018-06-05 19:29:00
github
github
ZipSlip in org.apache.storm:storm-core
2018-10-16 17:35:24
nessus
nessus
Apache Storm < 1.1.3 / 1.2.x < 1.2.2 arbitrary file write vulnerability
2019-02-28 00:00:00
osv
osv
Moderate severity vulnerability that affects org.apache.storm:storm-core
2018-10-16 17:35:24
CVE-2018-8008
2018-06-05 19:29:00
cvelist
cvelist
CVE-2018-8008
2018-06-05 00:00:00
prion
prion
Path traversal
2018-06-05 19:29:00
nvd
nvd
CVE-2018-8008
2018-06-05 19:29:00
checkpoint_advisories
checkpoint_advisories