CVE-2018-1047 PUBLISHED

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

EPSS 0.18% · 38.9th percentile

Risk Scores

EPSS Score
0.18%
38.9th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10undertow0, 2.3.18-2, 2.3.18-1
Ubuntu:20.04:LTSundertow2.0.23-1, 0, 2.0.27-1
Ubuntu:24.04:LTSundertow0, 2.3.8-2
Ubuntu:16.04:LTSundertow1.3.11-1, 1.3.16-1, 0
Ubuntu:22.04:LTSundertow2.2.13-1, 2.2.16-1, 0
Ubuntu:18.04:LTSundertow1.4.20-1, 1.4.22-1, 1.4.23-1

Timeline

References

Open in Interactive Console →