GHSA-6h58-c7r7-g2hw
UberFire Framework Improperly Restricts Paths
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.uberfire:uberfire-parent | >= 0.3.0.Beta5, <= 0.3.1.Final | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.
References
External links from the advisory. They lead to third-party sites.