Skip to content

CVE-2018-9117 WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory....

MediumCVSS 5.3 EPSS 2.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory Traversal.

Affected products

ProductAffected versionsFixed in
wiremock < 2.16.0 2.16.0

References