Uberfire

uberfire

Vendor: Redhat • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-8114

1Redhat

1Uberfire

May 6, 2026

Feb 20, 2015

N/A· v4

N/A· v3

6.8 MEDIUM· v2

The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involvi...Show more