CVE-2018-14928

Publication date

2018-08-03 21:00:00

Family

mitre

State

PUBLISHED

Description

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter.