Exploitation Summary
EIP tracks 4 public exploits for CVE-2014-7816.
PoCs published by dawetmaster, andikahilmy, shoucheng3, including Metasploit module auxiliary/scanner/http/wildfly_traversal.
AI-analyzed exploit summary The repository contains source code for Undertow, a Java web server, but lacks any exploit code or technical analysis related to CVE-2014-7816. The README provides no details about the vulnerability or how to exploit it.
Description
Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.Beta3, when running on Windows, allows remote attackers to read arbitrary files via a .. (dot dot) in a resource URI.
Exploits (4)
The repository contains source code for Undertow, a Java web server, but lacks any exploit code or technical analysis related to CVE-2014-7816. The README provides no details about the vulnerability or how to exploit it.
The repository contains a snapshot of the Undertow web server codebase but lacks any exploit code or technical analysis related to CVE-2014-7816. It appears to be a placeholder or incomplete repository.
The repository contains source code for Undertow, a Java web server, but lacks exploit-specific code or a proof-of-concept for CVE-2014-7816. The README and provided files are part of the Undertow project and do not demonstrate the vulnerability.
This Metasploit module exploits a directory traversal vulnerability in WildFly 8.1.0.Final on Windows systems, allowing unauthorized file reads via crafted HTTP requests. It sends a GET request with traversal sequences to access sensitive files like configuration files.