Non notée
CVE-2018-11798 The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a…
Description
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Thrift | Versions non publiées |
Références
- 106501 www.securityfocus.com
- lists.apache.org lists.apache.org
- RHSA-2019:1545 access.redhat.com
- www.oracle.com www.oracle.com
- RHSA-2019:3140 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Thrift
Les 91 CVE de Apache Thrift →
CVE-2026-120135
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings
8.2
Élevée
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification)…
6.9
Moyenne
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
7.1
Élevée
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings
8.7
Élevée