Wildfly versions prior to 10.0.0.Final, including 9.0.2.Final, and 8.2.1.Final suffer from a WEB-INF and META-INF information disclosure issue via a filter restriction bypass vulnerability. Video included showing the proof of concept.
702a857da000ebd458a935e4fbf17d96d7f77f33e1ef8aaa494e4206bfa48f76