CVE-2018-1047
MEDIUM 5.5EPSS 0.5%
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
- Affected
- Red Hat, Inc. · Wildfly
- CVSS v3.0 NVD
- 5.5 MEDIUM
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 0.51% chance of exploitation in the next 30 days, 42nd percentile
- Published
- 2018-01-24
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- shoucheng3/wildfly__wildfly_CVE-2018-1047_11-0-0-Final0★ · 2025-08-16
Security advisories
- https://issues.jboss.org/browse/WFLY-9620
- https://access.redhat.com/errata/RHSA-2018:1247
- https://access.redhat.com/errata/RHSA-2018:1248
- https://access.redhat.com/errata/RHSA-2018:1249
- https://access.redhat.com/errata/RHSA-2018:1251
- https://access.redhat.com/errata/RHSA-2018:2938
- https://bugzilla.redhat.com/show_bug.cgi?id=1528361
- advisories/GHSA-fmr4-w67p-vh8x