CVE-2018-10862

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to…

published July 27, 2018

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01262 · 69.4th percentile
Published
2018-07-27T14:00Z
EPSS history
Timeline
  • 27 JUL 14:00Z
    WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to…
    cvelistv5