VYPR
← All advisories
Moderate severityNVD Advisory· Published Jan 7, 2019· Updated Aug 5, 2024

CVE-2018-11798

CVE-2018-11798

Description

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.thrift:libthriftMaven
>= 0.9.2, < 0.12.00.12.0

Affected products

136

Patches

Vulnerability mechanics

References

12

News mentions

0

No linked articles in our index yet.