CVE-2018-1306

EPSS 43.9%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 43.9%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

27 Jun 2018Published on NVD

13 Sep 2018Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.

Affected products

Apache Software Foundation · Apache Pluto

public PoCs found — 4

githubgithub.com/JJSO12/Apache-Pluto-3.0.0--CVE-2018-1306★ 0 githubgithub.com/Imsol0/APACHE-CVE-2018-1306-Lab-project★ 0 cve_referencewww.exploit-db.com/exploits/45396/unverified exploitdbwww.exploit-db.com/exploits/45396unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://portals.apache.org/pluto/security.html https://www.exploit-db.com/exploits/45396/