CVE-2018-8008: Path Traversal
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.storm:storm-coreto a version that resolves this vulnerability.Fixed in 1.0.7 - Upgrade
Upgrade
maven/org.apache.storm:storm-coreto a version that resolves this vulnerability.Fixed in 1.1.3 - Upgrade
Upgrade
maven/org.apache.storm:storm-coreto a version that resolves this vulnerability.Fixed in 1.2.2 - Upgrade
Upgrade
Apache Stormto a version that resolves this vulnerability.Fixed in 1.2.2 - Upgrade
Upgrade
Apache Stormto a version that resolves this vulnerability.Fixed in 1.1.3 - Upgrade
Upgrade
Apache Stormto a version that resolves this vulnerability.Fixed in 1.0.7
Event History
Frequently Asked Questions
What is Apache Storm version 1.0.6 and earlier 1.2.1 and earlier and version 1.1.2 and earlier?
Apache Storm is a distributed real-time computation system for processing large amounts of data.
What is a zip archive?
A zip archive is a file format used to compress and package multiple files or directories into a single file.
How does Apache Storm expose an arbitrary file write vulnerability?
Apache Storm exposes an arbitrary file write vulnerability by not properly handling specially crafted zip archives that contain path traversal filenames.
What is the severity of CVE-2018-8008?
The severity of CVE-2018-8008 is medium with a CVSS score of 5.5.
How can I fix CVE-2018-8008?
To fix CVE-2018-8008, update to Apache Storm version 1.0.7, 1.1.3, or 1.2.2 or later.