Description

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

Remediation

References

https://snyk.io/research/zip-slip-vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10862

https://access.redhat.com/errata/RHSA-2018:2279

https://access.redhat.com/errata/RHSA-2018:2277

https://access.redhat.com/errata/RHSA-2018:2276

https://access.redhat.com/errata/RHSA-2018:2428

https://access.redhat.com/errata/RHSA-2018:2425

https://access.redhat.com/errata/RHSA-2018:2424

https://access.redhat.com/errata/RHSA-2018:2423

https://access.redhat.com/errata/RHSA-2018:2643

https://access.redhat.com/errata/RHSA-2019:0877

Related Vulnerabilities

CVE-2019-5417 Vulnerability in npm package serve

CVE-2021-23901 Vulnerability in maven package org.apache.nutch:nutch

CVE-2019-11343 Vulnerability in maven package org.torpedoquery:org.torpedoquery

CVE-2015-7559 Vulnerability in maven package org.apache.activemq:activemq-core

CVE-2019-5416 Vulnerability in npm package localhost-now

Severity

Medium

Classification

CWE-22 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory Issue Tracking Vendor Advisory