Количество 2
Количество 2
CVE-2018-1306
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.
GHSA-v49x-8hvm-q347
Exposure of Sensitive Information in Apache Pluto
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-1306 The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information. | CVSS3: 7.5 | 65% Средний | больше 7 лет назад |
| GHSA-v49x-8hvm-q347 Exposure of Sensitive Information in Apache Pluto | CVSS3: 7.5 | 65% Средний | больше 3 лет назад |
Уязвимостей на страницу