Description

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

Remediation

References

CVE-2019-10184

Related Vulnerabilities

Nginx Other Vulnerability (CVE-2016-4450)

MySQL CVE-2017-3453 Vulnerability (CVE-2017-3453)

MySQL CVE-2022-21323 Vulnerability (CVE-2022-21323)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33998)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.13.4)

Severity

High

Classification

CVE-2019-10184 CWE-862 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities