CVE-2018-14928: Matera Banco

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter.

Affected products

• Matera Banco: version 1.0.0 only

Published 2018-08-03. Last modified 2026-06-17.