apache thrift CVE-2018-11798 is a vulnerability in Apache Thrift
Published on January 7, 2019

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2018-11798

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-11798 are published in Apache Thrift:

Apache Thrift
 

Affected Versions

Apache Software Foundation Apache Thrift Version Apache Thrift 0.9.2 to 0.11.0 is affected by CVE-2018-11798

Exploit Probability

EPSS
0.55%
Percentile
67.41%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.