CVE-2018-11798

2019-01-0718:00:00

apache

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

CNA Affected

[
  {
    "product": "Apache Thrift",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Thrift 0.9.2 to 0.11.0"
      }
    ]
  }
]