CVE-2019-10184CWE-862

undertow before version 2.0.23.Final is vulnerable to an information leak issue

Medium · published July 25, 2019

CVSS v3.0
5.3
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03478 · 89.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2019-07-25T20:35Z
EPSS history
Timeline
  • 25 JUL 20:35Z
    undertow before version 2.0.23.Final is vulnerable to an information leak issue
    cvelistv5