CVSS 3.0
5.5 mediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2018-1047
Medium (5.5) in redhat. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in org.wildfly:wildfly-undertow 12.0.0.
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_enterprise_application_platform
- redhat:jboss_wildfly_application_server
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fmr4-w67p-vh8x | Maven | org.wildfly:wildfly-undertow | <12.0.0 | 12.0.0 |