Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-8114

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6h58-c7r7-g2hw

UberFire Framework Improperly Restricts Paths The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.

gitlab/maven/org.uberfire/uberfire-parent/CVE-2014-8114

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.