Skip to content
OpenAdvisories

Vendor

undertow-io

2 known vulnerabilities.

Products

undertow 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2019-10184

    Undertow Missing Authorization when requesting a protected directory without trailing slash

    undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

    undertow-io undertow undertow undertow Debian Ubuntu Maven