Management console/CLI does not limit the size of uploaded file --------------------------------------------------------------- Key: WFCORE-1057 URL: https://issues.jboss.org/browse/WFCORE-1057 Project: WildFly Core Issue Type: Enhancement Components: CLI, Domain Management Affects Versions: 2.0.0.CR6 Reporter: Lin Gao Assignee: Lin Gao Attachments: WFCORE-1057-Management-console-CLI-does-not-limit-th.patch "JBoss management console does not restrict file uploads. A remote attacker could use this flaw to upload a large file through the management console, exhausting all available disk space." CLI does not limit the size of the uploaded file either, so both 'http' and 'remote' management interface should be fixed.