CVE-2014-8114: The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute...

Security readout for executives and security teams

CVE-2014-8114 is a path restriction flaw in UberFire Framework 0.3.x. If a vulnerable application exposes the affected upload or download servlets, a remote attacker may be able to run code or read files. The source bundle does not provide CVSS scoring, exploit evidence, or exact downstream affected products. Exposure is most likely in applications or products that bundled UberFire Framework 0.3.x and expose the affected servlets to untrusted users or networks. The provided affected-product metadata is incomplete and lists vendor/product as n/a. Treat this as high priority for any public or partner-facing system using UberFire 0.3.x. Business risk is elevated because the described impact includes code execution and file disclosure, but urgency depends on whether the affected servlets are reachable. Mitigation focus: Review RHSA-2015:0234 and RHSA-2015:0235 for applicable vendor updates.; Compare deployed UberFire code or packages against the referenced fixing commit.; Upgrade or replace vulnerable UberFire 0.3.x components where vendor guidance applies..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.