Description

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

Remediation

References

https://snyk.io/research/zip-slip-vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10862

https://access.redhat.com/errata/RHSA-2018:2279

https://access.redhat.com/errata/RHSA-2018:2277

https://access.redhat.com/errata/RHSA-2018:2276

https://access.redhat.com/errata/RHSA-2018:2428

https://access.redhat.com/errata/RHSA-2018:2425

https://access.redhat.com/errata/RHSA-2018:2424

https://access.redhat.com/errata/RHSA-2018:2423

https://access.redhat.com/errata/RHSA-2018:2643

https://access.redhat.com/errata/RHSA-2019:0877

Related Vulnerabilities

CVE-2018-25066 Vulnerability in npm package nodebatis

CVE-2022-0436 Vulnerability in npm package grunt

CVE-2021-43861 Vulnerability in npm package mermaid

CVE-2023-47323 Vulnerability in maven package org.silverpeas.core:silverpeas-core-api

CVE-2020-28490 Vulnerability in npm package async-git

Severity

Medium

Classification

CWE-22 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory Issue Tracking Vendor Advisory