En bref
- CVE-2018-11798 est une vulnérabilité MOYENNE (CVSS 6.5) touchant org.apache.thrift:libthrift, thrift (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.7%, plus élevée que 91.8% des vulnérabilités.
- Correctif : mettre à jour vers 0.12.0 ou plus récent.
Description
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
NVD description
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Autres vulnérabilités de org.apache.thrift:libthrift
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free