CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache, Nginx. Exploitation may require the attacker to be authenticated.
CVE
CVE-2018-1299
Severity
HIGH
CVSS
7.5
EPSS
3.00%
Apache Nginx
Original NVD Description
In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the Allura web application. Some webservers used with Allura, such as Nginx, Apache/mod_wsgi or paster may prevent the attack from succeeding. Others, such as gunicorn do not prevent it and leave Allura vulnerable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)