CVE-2018-11798

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:46:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991...

Huawei EulerOS: Security Advisory for thrift (EulerOS-SA-2019-1458)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4.8 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Important: Red Hat Security Advisory: Red Hat Fuse 7.3.1 security update

A micro version update from 7.3 to 7.3.1 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...

CVE-2018-11798

A flaw was found in the Node.js static web server in Apache Thrift, where it allowed a remote user to access files outside of the set web servers' docroot path. An attacker could use this flaw to possibly access unauthorized files and sensitive information...

ai.chronon:online_2.11 (>=chaining-0.0.46-dev, <=0.0.115), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +3135 more potentially affected by CVE-2018-11798 via org.apache.thrift:libthrift (>=0.9.2, <=0.11.0)

org.apache.thrift:libthrift MAVEN version =0.9.2, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =1.4.1, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0,...

ai.chronon:online_2.11 (>=chaining-0.0.46-dev, <=0.0.115), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +3135 more potentially affected by CVE-2018-11798 via org.apache.thrift:libthrift (>=0.9.2, <=0.11.0)

org.apache.thrift:libthrift MAVEN version =0.9.2, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =1.4.1, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0,...

CVE-2018-11798

The CVE-2018-11798 entry concerns Apache Thrift Node.js static web server (versions 0.9.2–0.11.0) where a remote attacker can access files outside the webroot docroot. Connected sources also reference CVE-2018-1320 in the Thrift TSaslTransport SASL handshake validation issue. NVD metrics cite a b...

CVE-2018-11798 vulnerabilities

Vulnerabilities for packages: trino, druid...

ai.chronon:online_2.11 (>=chaining-0.0.46-dev, <=0.0.115), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +3135 more potentially affected by CVE-2018-11798 via org.apache.thrift:libthrift (>=0.9.2, <=0.11.0)

org.apache.thrift:libthrift MAVEN version =0.9.2, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =1.4.1, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0,...

CVE-2018-11798 vulnerabilities

Vulnerabilities for packages: druid, trino...

CVE-2018-11798

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path...