CVE-2018-11798

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user…

published January 7, 2019

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04915 · 92.1th percentile
Published
2019-01-07T18:00Z
EPSS history
Timeline
  • 07 JAN 18:00Z
    The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user…
    cvelistv5