WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives...

References

• advisory https://access.redhat.com/errata/RHSA-2018:2276
• advisory https://access.redhat.com/errata/RHSA-2018:2277
• advisory https://access.redhat.com/errata/RHSA-2018:2279
• advisory https://access.redhat.com/errata/RHSA-2018:2423
• advisory https://access.redhat.com/errata/RHSA-2018:2424
• advisory https://access.redhat.com/errata/RHSA-2018:2425
• advisory https://access.redhat.com/errata/RHSA-2018:2428
• advisory https://access.redhat.com/errata/RHSA-2018:2643
• advisory https://access.redhat.com/errata/RHSA-2019:0877
• advisory https://snyk.io/research/zip-slip-vulnerability
• report https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10862