CVE-2018-14928

CVE-2018-14928

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter.

Source: CVE-2018-14928