CVE-2018-8x14
This challenge covers the review of a CVE in a Java codebase and its patch
The Code Review Patch challenges are designed to improve your code review skills by presenting you with both the vulnerable code and its corresponding patch. Initially, you are encouraged to find the security issue on your own, which enhances your analytical abilities. If you struggle to identify the issue or wish to confirm your findings, you can then refer to the patch (diff file) provided.
In this specific challenge, you will analyze the CorsFilter.java file from the Apache Catalina project. The vulnerable code is compared against the patched version, allowing you to see the exact changes made to fix the security issue. This exercise not only helps in understanding the nature of the vulnerability but also illustrates the importance of proper coding practices to prevent such flaws.