cbcvebase.

Getrailo Railo vulnerabilities

1 known vulnerability affecting getrailo/railo.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-5468P2HIGHCVSS 8.8PoC≤ 4.2.1.0002020-02-07
CVE-2014-5468 [HIGH] CWE-20 CVE-2014-5468: A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
nvd
Getrailo Railo vulnerabilities | cvebase