Kurz gesagt
- CVE-2024-1459 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in io.undertow:undertow-core.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.7%, höher als bei 77.4% aller Schwachstellen.
- Abhilfe: auf 2.3.12.Final, 2.2.31.Final oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| io.undertow:undertow-core Maven | ≥ 2.3.0.Alpha1, < 2.3.12.Final< 2.2.31.Final
| 2.3.12.Final2.2.31.Final
|
Description
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
NVD description
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free