CVE-2008-5518 in the critical feed json
Apache Geronimo Application Server multiple directory traversal vulnerabilities
published 2009-04-17 17 y ago modified 2026-06-16 4 mo ago also GHSA-xm92-rf24-h74w , EUVD-2022-5821
- cvss
- 9.4
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 35.9%
- EPSS 35.9% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB
Summary
Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.
Patch / fix
- maven org.apache.geronimo.plugins:console 2.1.4
Timeline
- First public exploit (EDB-8458)
- Published
Exploit prediction
35.93% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-8458 Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities remote, 2009-04-16
- securityfocus.com http://www.securityfocus.com/bid/34562 referenced PoC, tagged "exploit" by a source, unverified
- dsecrg.com http://dsecrg.com/pages/vul/show.php?id=118 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.4 | AV:N/AC:L/Au:N/C:C/I:C/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.apache.geronimo.plugins:console | >=2.1.0, <2.1.4 |
2.1.4 |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
geronimo.apache.org
/21x-security-report.html#2.1.xSecurityReport-214
web, patch, vendor-advisory
-
issues.apache.org
/jira/browse/GERONIMO-4597
web, patch, vendor-advisory
-
github.com
/apache/geronimo/commit/aa0c2c26dde8930cad924796af7c17a13d236b16
web
-
exploit-db.com
/exploits/8458
exploit, web
-
securityfocus.com
/bid/34562
vdb-entry, exploit
-
dsecrg.com
/pages/vul/show.php?id=118
exploit
-
exchange.xforce.ibmcloud.com
/vulnerabilities/49900
vdb-entry, web
-
exchange.xforce.ibmcloud.com
/vulnerabilities/49899
vdb-entry, web
-
vupen.com
/english/advisories/2009/1089
vdb-entry
-
secunia.com
/advisories/34715
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/49898
vdb-entry, web
-
securityfocus.com
/archive/1/502733/100/0/threaded
mailing-list
-
nvd.nist.gov
/vuln/detail/CVE-2008-5518
advisory
-
github.com
/apache/geronimo
package
-
web.archive.org
/web/20090419162753/http://secunia.com/advisories/34715
web
-
web.archive.org
/web/20090422192030/http://dsecrg.com/pages/vul/show.php?id=118
web
-
web.archive.org
/web/20200229223125/http://www.securityfocus.com/bid/34562
web
Sources
- CVE List CVE-2008-5518
- GitHub Advisory GHSA-xm92-rf24-h74w
- NVD CVE-2008-5518
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.