Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat Wildfly 信息泄露漏洞
Vulnerability Description
Red Hat Wildfly（前称JBoss Application Server）是美国红帽（Red Hat）公司的一款基于JavaEE的开源应用服务器。 基于Windows平台的Red Hat WildFly 10.0.0版本中的servlet filter restriction机制中存在不完整黑名单漏洞。远程攻击者可通过发送包含小写字母或无意义的字符的请求利用该漏洞读取WEB-INF或META-INF目录中的敏感文件。
CVSS Information
N/A
Vulnerability Type
N/A