perwendel__spark_CVE-2018-9159_2-7-1

Spark - un framework web minimaliste pour Java 8 NOUVEAUTÉS : Spark 2.7.0 est disponible. Merci de l'essayer et de signaler tout bug. root@kitploit: com.sparkjava spark-core 2.7.0 Important - Il existe une vulnérabilité dans les versions antérieures de Spark versions inférieures à 2.5.2. Merci de...

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark - um micro framework web para Java 8 Novidades : Spark 2.7.1 foi lançado. Experimente e reporte quaisquer bugs. root@kitploit: com.sparkjava spark-core 2.7.1 Importante - Há uma vulnerabilidade em versões mais antigas do Spark versões anteriores à 2.5.2. Atualize para a versão mais recente...

CVE-2018-9159

In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark...

SUSE-SU-2018:2689-1 Security update for spark

This update for spark fixes the following security issue: - CVE-2018-9159: Fix a security problem in the serving of static files. bsc1087837...

Critical: Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R7 security and bug fix update

An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2018-9159

CVE-2018-9159 affects Spark before 2.7.2, allowing a remote attacker to disclose unintended static files via absolute/relative path representations (including file: URLs and directory traversal). The issue is addressed by Spark 2.7.2 and upstream fixes cited by Red Hat and SUSE OSV/RH advisories;...