CVE-2016-0793

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-0793
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0793.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-0793
Aliases
Published
2016-04-01T19:59:00.137Z
Modified
2026-07-08T12:35:33.069897Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.

References

Affected packages

Git / github.com/wildfly/wildfly

Affected ranges

Type
GIT
Repo
https://github.com/wildfly/wildfly
Events
Introduced
f52e8d79b9eff90b8c063e1c96d1c37be746c807
Last affected
f52e8d79b9eff90b8c063e1c96d1c37be746c807
Database specific 
{
    "cpe": "cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "last_affected": "10.0.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

10.*
10.0.0
10.0.0.Final

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0793.json"