CVE Daily

CVE-2018-11798

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 hav...

Medium CVSS 6.5

Overview

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

CWE: CWE-538 Published: 2019-01-07T17:29:00.283
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags