CVE-2018-11798: Apache Thrift Node.js Static Web Server Remote File Access
Summary
CVE-2018-11798: Apache Thrift Node.js static web server sandbox escape. Affects org.apache.thrift:libthrift versions >= 0.9.2, < 0.12.0. Fixed in 0.12.0. How to fix ↓
Also tracked for
- thrift · Debian:11
The same CVE-2018-11798 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Apache Thrift Node.js static web server is a component of the Apache Thrift framework, which is used for scalable cross-language services development. It provides a web server functionality for serving static files. The vulnerability identified as CVE-2018-11798 allows a remote user to access files outside the web server's designated document root path.
Vulnerability Detail
The Apache Thrift Node.js static web server versions 0.9.2 through 0.11.0 are affected by a security vulnerability. This vulnerability enables a remote attacker to access files beyond the web server's intended document root directory. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive files and data on the server. The vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
0.12.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, as a general security practice, it is advisable to implement access controls and restrictions on the web server configuration to limit the exposure of sensitive files. Additionally, regular monitoring and auditing of server logs can help detect any unauthorized access attempts.
Conclusion
The Apache Thrift Node.js static web server versions 0.9.2 through 0.11.0 are vulnerable to remote file access. Upgrading to version 0.12.0 or later is recommended to fix this vulnerability. Implementing access controls and monitoring server logs can further enhance security. For additional support, please reach out to DevNack.com.
See every vulnerability recorded for org.apache.thrift:libthrift →
FAQ
The vulnerability allows a remote attacker to access files outside the web server's designated document root path, potentially exposing sensitive information and compromising the server's security.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using just the pom.xml file, without requiring access to the code or installation.
The CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
There are no known public exploits available for this vulnerability at the time of this report. However, it is important to apply the recommended fix to ensure the server's security.
For further support on vulnerability remediation and assistance with securing your application, you can contact info@devnack.com.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.thrift:libthrift.
