High severity7.5NVD Advisory· Published Oct 30, 2017· Updated Jun 17, 2026
CVE-2014-0115
CVE-2014-0115
Description
Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.storm:stormMaven | <= 0.9.0.1 | — |
Affected products
2Patches
Vulnerability mechanics
References
5- issues.apache.org/jira/browse/STORM-269nvdIssue TrackingPatchVendor AdvisoryWEB
- github.com/advisories/GHSA-cpp8-r8pr-wv4vghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-0115ghsaADVISORY
- mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645@arcas%3EghsaWEB
- mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645%40arcas%3Envd
News mentions
0No linked articles in our index yet.