Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2018-11798

🗓️ 07 Jan 2019 18:00:00Reported by Debian Security Bug TrackerType 
debiancve
 debiancve🔗 security-tracker.debian.org👁 27 Views

The Apache Thrift Node.js server 0.9.2-0.11.0 allows remote access to files outside docroot pat

Related
Packages
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
13 Apr 202120:46
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Apache Thrift
20 Jun 202216:01
–ibm
BDU FSTEC		The vulnerability in the Apache Thrift web server for Node.js exists due to an incorrect pathname limitation for the restricted access directory, allowing attackers to gain access to arbitrary files.
11 Jul 201900:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Apache Thrift interface description language in Node.js allows a hacker to gain unauthorized access to protected information.
3 Dec 201900:00
–bdu_fstec
Chainguard		CVE-2018-11798 vulnerabilities
7 Jan 201918:00
–cgr
CNVD		Apache Thrift Node.js static web server access control error vulnerability
8 Jan 201900:00
–cnvd
CVE		CVE-2018-11798
7 Jan 201918:00
–cve
Cvelist		CVE-2018-11798
7 Jan 201918:00
–cvelist
Tenable Nessus		EulerOS Virtualization 3.0.1.0 : thrift (EulerOS-SA-2019-1458)
14 May 201900:00
–nessus
EUVD		EUVD-2019-0195
7 Oct 202500:30
–euvd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian11anythrift0.11.0-4thrift_0.11.0-4_any.deb
Debian12anythrift0.11.0-4thrift_0.11.0-4_any.deb
Debian13anythrift0.11.0-4thrift_0.11.0-4_any.deb
Debian14anythrift0.11.0-4thrift_0.11.0-4_any.deb
Debian999anythrift0.11.0-4thrift_0.11.0-4_any.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Jan 2019 18:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 24
CVSS 36.5
EPSS0.04875
apache thriftnode.jssecurity vulnerabilityremote accessdocroot pathunix
27