CVE-2018-11798 is a vulnerability in Apache Thrift
Published on January 7, 2019
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Products Associated with CVE-2018-11798
Want to know whenever a new CVE is published for Apache Thrift? stack.watch will email you.
Affected Versions
Apache Software Foundation Apache Thrift Version Apache Thrift 0.9.2 to 0.11.0 is affected by CVE-2018-11798Exploit Probability
EPSS
0.55%
Percentile
67.81%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.