{"schemaVersion":3,"id":"CVE-2008-5518","aliases":["GHSA-xm92-rf24-h74w"],"status":"published","duplicateOf":null,"title":null,"description":"Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.","dates":{"published":"2009-04-17T14:00:00.000Z","modified":"2024-08-07T10:56:46.696Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.4,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.4,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.35929,"percentile":0.9847,"severity":"high","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.35929},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.35929,"percentile":0.9847}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.35929,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.35929,"percentile":0.9847}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_8640C55A319F4FC7","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/34562","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_BC1F44C07878B76F","name":"Exploit Reference (dsecrg.com)","source":"reference","url":"http://dsecrg.com/pages/vul/show.php?id=118","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"8458","name":"Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities","source":"exploit-database","url":"https://www.exploit-db.com/exploits/8458","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/8458.txt","codes":["OSVDB-53929","CVE-2008-5518","OSVDB-53928","OSVDB-53927"]},"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"apache","product":"geronimo","name":"geronimo","label":"geronimo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.1","noFixRecorded":false,"fixedIn":null},{"text":"2.1.1","noFixRecorded":false,"fixedIn":null},{"text":"2.1.2","noFixRecorded":false,"fixedIn":null},{"text":"2.1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.1 | 2.1.1 | 2.1.2 | 2.1.3","eol":null,"hubHref":"/vendor/apache/geronimo"},{"vendor":"org.apache.geronimo.plugins","product":"console","name":"org.apache.geronimo.plugins:console","label":"console","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.geronimo.plugins/console","purlType":"maven","versions":[{"text":"≥ 2.1.0, < 2.1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.1.0, < 2.1.4","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49900","label":"exchange.xforce.ibmcloud.com/vulnerabilities/49900","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","WEB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49899","label":"exchange.xforce.ibmcloud.com/vulnerabilities/49899","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","WEB"]},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","label":"geronimo.apache.org/21x-security-report.html","hostname":"geronimo.apache.org","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","WEB"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","label":"www.vupen.com/english/advisories/2009/1089","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/bid/34562","label":"www.securityfocus.com/bid/34562","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","label":"issues.apache.org/jira/browse/GERONIMO-4597","hostname":"issues.apache.org","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","WEB"]},{"url":"http://secunia.com/advisories/34715","label":"secunia.com/advisories/34715","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49898","label":"exchange.xforce.ibmcloud.com/vulnerabilities/49898","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","WEB"]},{"url":"https://www.exploit-db.com/exploits/8458","label":"www.exploit-db.com/exploits/8458","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","WEB"]},{"url":"http://www.securityfocus.com/archive/1/502733/100/0/threaded","label":"www.securityfocus.com/archive/1/502733/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=118","label":"dsecrg.com/pages/vul/show.php?id=118","hostname":"dsecrg.com","tags":["X Refsource MISC","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5518","label":"nvd.nist.gov/vuln/detail/CVE-2008-5518","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/geronimo/commit/aa0c2c26dde8930cad924796af7c17a13d236b16","label":"github.com/apache/geronimo/commit/aa0c2c26dde8930cad924796af7c17a13d236b16","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/apache/geronimo","label":"github.com/apache/geronimo","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://web.archive.org/web/20090419162753/http://secunia.com/advisories/34715","label":"web.archive.org/web/20090419162753/http://secunia.com/advisories/34715","hostname":"web.archive.org","tags":["WEB"]},{"url":"https://web.archive.org/web/20090422192030/http://dsecrg.com/pages/vul/show.php?id=118","label":"web.archive.org/web/20090422192030/http://dsecrg.com/pages/vul/show.php?id=118","hostname":"web.archive.org","tags":["WEB"]},{"url":"https://web.archive.org/web/20200229223125/http://www.securityfocus.com/bid/34562","label":"web.archive.org/web/20200229223125/http://www.securityfocus.com/bid/34562","hostname":"web.archive.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2009-04-17T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T10:56:46.696Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:52:42.338Z","stale":false,"partial":false}}