Lucene search

K

Apache Incubator Heron Security Vulnerabilities

cve
cve

CVE-2018-11789

When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the directory you would like to view. i.e....

7.5CVSS

7.5AI Score

0.001EPSS

2019-03-21 04:00 PM
19