| Package | Affected versions | Patched versions |
|---|---|---|
| org.wildfly:wildfly-undertow | < 12.0.0 | 12.0.0 |
| jboss enterprise application platform | = 7.1.0 | |
| jboss wildfly application server | = 10.0.0= 10.1.0= 11.0.0= 9.0.0= 9.0.1= 9.0.2 |
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free