[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkl_jIa-STZG0MyDkz3syfxA3uDVLsPiXv0MEdd0l1Qs":3,"g5a-risk:CVE-2018-1265":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":54,"references":55,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":15,"otxData":15,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":110,"notableEvents":111},"CVE-2018-1265","What is CVE-2018-1265?","Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.","Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin pri...","2018-06-06T20:29:00.47","2021-08-17T14:29:40.507",7.2,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","HIGH","NONE","UNCHANGED",1.2,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.01743,[42,42,40,40,40,40,40],0.01771,"High",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"cloudfoundry","cf-deployment","*","cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":48,"criteria":53,"vulnerable":4},"pivotal_software","cloud_foundry_diego","cpe:2.3:a:pivotal_software:cloud_foundry_diego:*:*:*:*:*:*:*:*",2,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.cloudfoundry.org\u002Fblog\u002Fcve-2018-1265\u002F","Cloudfoundry",[60],"Third Party Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2018-1265? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1265, a high severity cyber security vulnerability from 2018. Cloud Foundry Diego, release versions prior to 2.8.0, does n...","CVE-2018-1265, CVE-2018-1265 vulnerability, CVE-2018-1265 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, cloudfoundry security, pivotal_software security, cf-deployment vulnerability, cloud_foundry_diego vulnerability","\u002Fwhat-is\u002Fcve-2018-1265",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1265","Cybersecurity","CVE-2018-1265, CVE-2018-1265 vulnerability, CVE-2018-1265 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":15,"Negate":15,"Nodes":100},[101],{"Operator":102,"Negate":15,"CPEMatch":103},"OR",[104,107],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":105,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":106,"VersionEndIncluding":15},"B81F4ECF-DFAA-480C-8617-4FE6867151B4","1.37.0",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":108,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":109,"VersionEndIncluding":15},"F2D0F223-36C9-470E-8D42-5A023634F7B8","2.8.0",[],[],{"lastModified":11,"cacheTime":113,"version":32},1792375296286,{"score":115,"band":116,"action":117,"scoredAt":118},46,"Medium","Plan remediation","2026-10-16T06:44:12.40744+00:00"]