CyberRota Analysis
AI-GeneratedA vulnerability exists in WildFly's core that allows an authenticated attacker with 'deployer' permissions to upload and deploy malicious archive files from untrusted sources. This could lead to further exploitation, including arbitrary file read vulnerabilities, potentially compromising the integrity of the application. Organizations using WildFly, particularly those with deployer accounts, should prioritize addressing this issue to mitigate risks associated with unauthorized deployments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the malicious archive. This could lead to further exploitation, such as arbitrary file read vulnerabilities.