CVE-2018-8008: Arbitrary File Write Vulnerability in org.apache.storm:storm-core
Summary
CVE-2018-8008: ZipSlip in org.apache.storm:storm-core. Affects org.apache.storm:storm-core across 3 version ranges.
< 1.0.7
>= 1.1.0, < 1.1.3
>= 1.2.0, < 1.2.2
Fixed in 1.0.7, 1.1.3 or 1.2.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
org.apache.storm:storm-core is a Maven package that provides a distributed real-time computation system for processing large streams of data. It is widely used for data processing and analytics in various industries. However, versions 1.0.6 and earlier, 1.2.1 and earlier, and 1.1.2 and earlier of Apache Storm are vulnerable to an arbitrary file write vulnerability.
Vulnerability Detail
The vulnerability allows an attacker to write arbitrary files on the target system by exploiting a path traversal vulnerability in the handling of specially crafted zip archives. This vulnerability affects other archive formats as well, such as bzip2, tar, xz, war, cpio, and 7z. By manipulating the filenames within the archive, an attacker can traverse outside of the intended extraction directory, potentially overwriting critical files or executing arbitrary code.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.0.71.0.7 -
>= 1.1.0, < 1.1.31.1.3 -
>= 1.2.0, < 1.2.21.2.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a patched version of Apache Storm.
Conclusion
The arbitrary file write vulnerability in org.apache.storm:storm-core can be mitigated by upgrading to a fixed version of Apache Storm. It is crucial to apply the recommended fix to ensure the security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.storm:storm-core →
FAQ
The vulnerability allows an attacker to write arbitrary files on the target system, potentially leading to unauthorized access, data loss, or remote code execution.
Yes, this vulnerability can be exploited remotely by sending a specially crafted archive file to the vulnerable system.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Yes, the CVSS score for this vulnerability is 5.5, indicating a moderate severity.
Yes, you can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert provides real-time monitoring and alerts for open-source vulnerabilities in software.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.storm:storm-core.
