Skip to content
Sign in
Not rated

CVE-2018-1306 The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote…

Description

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.

Affected products and versions

Product Affected versions Fixed in
Apache Pluto 3.0.0 No fix stated

Other CVEs of Apache Pluto

The 2 CVEs of Apache Pluto →
CVE-2019-0186 The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting… Not rated
Track this CVE