Security Advisory
CVE-2018-1306
7.5
HIGH
Vulnerability Description
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.
Published Date
June 27, 2018
Official Source
NIST NVD Advisory