The Undertow module of WildFly allows source code disclosure

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-3198 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• developer.jboss.org/message/927301 · WEB
• issues.jboss.org/browse/WFLY-4595 · WEB
• stackoverflow.com/questions/30028346/with-trailing-slash-in-url-jsp-show-source-code · WEB

org.wildfly:wildfly-parent のその他の脆弱性

• CVE-2021-3536中 4.8A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible t…
• CVE-2020-27822中 5.9A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application…
• CVE-2020-25640中 5.3A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection err…
• CVE-2020-10740高 7.5A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Ap…
• CVE-2016-0793高 7.5Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.…