En resumen
- CVE-2018-11798 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.apache.thrift:libthrift, thrift (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.7%, mayor que el 91.8% de las vulnerabilidades.
- Solución: actualizar a 0.12.0 o posterior.
Description
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
NVD description
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Más vulnerabilidades de org.apache.thrift:libthrift
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free