Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:wildfly_core:6.0.0:alpha2:*:*:*:*:*:*

part: a version: 6.0.0 update: alpha2

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductWildfly Core (9f0ef1dd-793d-5631-b60b-9401b86f3d7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wildfly/wildfly-core purl2cpe 2026-06-01 10:12:57.005740

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10862 vulnerable 2026-06-08 05:10:37.246664 Details available
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
Published: 2018-07-27T14:00:00.000Z
Updated: 2024-08-05T07:46:47.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.