WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://snyk.io/research/zip-slip-vulnerability | x_refsource_MISC |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10862 | x_refsource_CONFIRM |
| https://access.redhat.com/errata/RHSA-2018:2428 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2643 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2279 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2424 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2276 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2423 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2425 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:2277 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2019:0877 | vendor-advisory x_refsource_REDHAT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|