CVE-2018-1266

CVE-2018-1266 describes information disclosure and path traversal vulnerabilities in Cloud Foundry Cloud Controller versions prior to 1.52.0. An authenticated attacker can exploit this to predict application blob locations and use path traversal to create a malicious application, enabling arbitrary file overwrites on the Cloud Controller instance. With a CVSS score of 8.1 (High), this vulnerability allows for high impact to confidentiality and integrity with low attack complexity and no user interaction required. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.